This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About SantiBT
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About SantiBT
01-22-2019
15Posts
0Likes
1Solution
Jan 22, 2019Last Visited
User
Activity
User
Profile
Latest posts by SantiBT
| Subject | Views | Posted |
|---|---|---|
| 3774 | 09-18-2017 02:35 AM | |
| 3829 | 09-13-2017 03:39 AM | |
| 4000 | 03-28-2017 05:55 AM | |
| 4003 | 03-28-2017 03:48 AM | |
| 3499 | 03-27-2017 05:36 AM | |
| 3512 | 03-27-2017 02:02 AM | |
| 4115 | 03-02-2017 08:07 AM | |
| 4123 | 03-02-2017 07:42 AM | |
| 4192 | 02-27-2017 09:02 AM | |
| 9839 | 02-23-2017 12:21 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 02-20-2017 08:57 AM |
| Date Last Visited | 01-22-2019 10:57 AM |
| Posts | 15 |
09-18-2017
02:35 AM
So I've several issues with the web service, this service dies sometimes normally, I don't konw why...I'm researching about this but I don't see nothing. I think that a good solution is that (cron task) for example.
Thanks in advance
... View more
09-13-2017
03:39 AM
Hi,
I'm researching about restart all the services of minemeld but I don't get nothing. How I can do it? I would like set a task on cron for example.
is it possible? Please, if you need more info let me know!
Thanks
... View more
03-28-2017
05:55 AM
$ sudo htpasswd /opt/minemeld/local/config/wsgi.htpasswd admin New password: Re-type new password: Updating password for user admin
... View more
03-28-2017
03:48 AM
Hi,
How I do reset the password user admin again??? I have this messages "bad gateway" when I put the credencials on the access web.
I can't login
Do you kwon something about this, please?
Thx
... View more
03-27-2017
02:02 AM
Hi,
Actually I've configured my access output feed like "https:// IP_ address"
So , how I can change that url by other IP or hostname??? sample can be: https://myminmedl.loca/... or https:// IP public/...
Thanks a lot
... View more
03-02-2017
07:42 AM
Hi Imori,
Yes, is on aggregator processor, you can see over the logs:
2/3/2017 16:01:56 +0100 TEST -aggr-TEST DROP_UPDATE 0.0.0.0 confidence: 80 share_level: red sources: ["test.ipsrc"] first_seen: 1488466915898 type: ipv4 last_seen: 1488466915898 source_node: TEST-IP-TEST
2/3/2017 16:01:56 +0100 TEST -aggr-TEST DROP_UPDATE 0.0.0.0 confidence: 80 share_level: red sources: ["test.ipsrc"] first_seen: 1488466915898 type: ipv4 last_seen: 1488466915898 source_node: TEST-IP-TEST
My node is config so:
CLASS
minemeld.ft.http.HttpFT
INDICATOR TYPES
IPv4IPv6
TAGS
CONFIG
attributes
confidence: 80
share_level: red
type: ipv4
delimeter #
fieldnames
indicator
ignore_regex ^#
interval 3600
source_name test.ipsrc
url http://test.server.local/ip-test.txt
My aggregator config is:
CLASS
minemeld.ft.ipop.AggregateIPv4FT
INDICATOR TYPES
IPv4
TAGS
None
CONFIG
infilters
NAME CONDITIONS ACTIONS
accept withdraws
__method == 'withdraw'
accept
accept IPv4
type == 'IPv4'
accept
drop all
drop
whitelist_prefixes
wl
I'm seening prefectly the IP on my node but its impossible can see these IPs on the aggregator, I see this message "DROP_UPDATE" always.
Do you know why??
Thanks!
... View more
02-27-2017
09:02 AM
Hi,
I've just created a new node and I'm seeing events such us: DROP_UPDATE on aggregator type.
My miner has all domain list but the aggregator has this meessge with "drop_update", do you know it??? Why???
Thanks a lot
... View more
02-22-2017
12:26 AM
Hi Lmori!!
Yes, I'm interesting in a miner for MISP!!!! it will be a great idea!!!!
Do you known that??????
Please, let me know if you need more info about this!!
Regards!
... View more
02-21-2017
04:11 AM
So I want to integrate MISP into Minemeld, I don't want to integrate Minemeld into MISP.
How I can integrate MISP into Minemeld??????
Regards!
... View more
02-21-2017
04:09 AM
Hi Kimwii
Do you refer about file config??? such us:
attributes: confidence: 80 share_level: green type: IPv4 delimiter: '#' fieldnames: - indicator interval: 3600 source_name: misp.reputation.ip-dst url: http://ip_myMisp/attributes/text/download/ip-dst add_url(event, url, category=’Network activity’, to_ids=True, comment=None, distribution=None, proposal=False)
is it so??????
Thx
... View more
02-20-2017
09:02 AM
Hi all,
Do you know something sample about integration with MISP (Malware Information share platform)???
So another question is about scripts, can I launch a script into conifg a new prototype? If I've created a new prototype I set a url option...can I set the url option for script option????
Thanks a lot
... View more
02-20-2017
09:01 AM
Hi,
Do you know something sample about integration with MISP (Malware Information share platform)???
So another question is about scripts, can I launch a script into conifg a new prototype? If I've created a new prototype I set a url option...can I set the url option for script option????
Thanks a lot
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks