Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- ›
- About chirss
About chirss
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
12-12-2018
67Posts
7Likes
1Solution
Dec 12, 2018Last Visited
User
Activity
User
Profile
Latest posts by chirss
| Subject | Views | Posted |
|---|---|---|
| 1219 | 12-07-2018 05:39 AM | |
| 1607 | 11-08-2018 10:47 AM | |
| 3840 | 10-24-2018 10:19 AM | |
| 1952 | 08-16-2018 09:11 AM | |
| 1824 | 08-16-2018 08:51 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 | 07-05-2018 09:10 AM | |
| 1 | 06-02-2017 07:47 AM | |
| 1 | 07-05-2018 09:44 AM | |
| 1 | 09-27-2016 02:03 PM | |
| 1 | 10-06-2017 02:10 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 |
User Badges
Public Statistics
| Date Registered | 09-14-2016 10:48 AM |
| Date Last Visited | 12-12-2018 02:53 PM |
| Total Messages Posted | 67 |
| Total Likes Received | 7 |
10-25-2019
11:37 AM
1 Kudo
Actually to add @joris_vd @lmori it appears that minemeld is now broken with Alienvault taxii feeds. I am getting SSLV3 handshake errors and no longer can pull. I have upgraded to latest version 0.9.64 and still not working.
... View more
05-17-2019
09:50 AM
Hello lmori.
Where does your script install ? on the minemeld host ? if yes, I need access to the CLI of minemeld which I don't have
Thanks
HJ
... View more
05-14-2019
08:26 AM
We are also planning to bring Minemeld threat intel into our SIEM LogRhythm. Is anyone doing that is kind enough to share how they set it up and if it is proving valuable?
... View more
01-24-2019
05:34 AM
SAML is best for me because we have the supporting infrastructure already in place. Our SaaS apps still seem to use SAML more than other protocols like OIDC.
Thanks for the pointer about the /flask files. I'm new to Flask but am thinking that a file like this (link below) could drop into MineMeld pretty easily and sit alongside the /login route (it uses /loginsso).
flask/loginsso.py # Full transparency - I have not tested this at all, just a mock up
I'll try to test some over the coming days.
... View more
01-13-2019
01:54 AM
Hi Luigi,
Thank you so much. I log in virustotal agaian and it turned back to old API version ( have no idea why) . It works now
Best REgards,
An
... View more
12-07-2018
05:39 AM
I have a different sort of thought and could use some help figuring out if mm can do this. Essentially I would like to feed in a list of ip addresses and then if there is a match against any blacklist to throw it to an output. The idea here is to list out all of the ip addresses I would want to know showed up in a blacklist/rbl in order to figure out why ip addresses I manage are getting listed and to know which blacklists are doing it. I don't have this problem right now, this is just more a thought I had on something else mm could do potentially.
... View more
11-20-2018
05:58 AM
Hi @chirss,
please use localDB Miner instead of the old listXXX. Could you try with it?
Thanks,
luigi
... View more
10-21-2018
11:49 PM
Thanks for your post. It was really helpful for me. If you want any technical assistance for Adobe Softwares then you can contact to Adobe Support,.
... View more
08-16-2018
09:11 AM
It's a bit more complicated, but maybe this can help as well? ^((?:((\d{1,3}.){3}\d{1,3}\s))(.*))$ I haven't tested it yet since I don't have a feed like this, but it seems to match and non-capture group on what it needs to.
... View more
08-16-2018
08:51 AM
Anyone had a chance to think on this? I've not come much further on these.
... View more
07-31-2018
09:33 AM
1 Kudo
Thanks a bunch!! I had few fatal erros running the playbook, but resolved them one by one. MineMeld is successfully installed and engines are running.
... View more
11-10-2017
02:20 PM
Ya. But firehol has a ton of lists. It might be worth contacting them directly to see if they have a preferred way to grab the data than from github.
... View more
10-15-2017
08:55 PM
1 Kudo
Hi @chirss,
this is an interesting question, I am working on it.
luigi
... View more
10-09-2017
10:16 AM
I do not, no. I use the autofocus hosted minemeld so it's not really something we ever considered doing.
... View more
10-05-2017
09:50 AM
Ya exactly.
The problem I'm finding is a lot of the miners likely have duplicate entries of some kind. So I'm sending them all to the same processor for similar types of feeds (phishing type miners to phishing processor for example). However I have to validate everything coming in before being able to trust it, i.e. verify before trusting.
The scenario you're talking about would be very beneficial in at least this scenario.
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
