<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI Emoji";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="en-BE" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="FR-BE" style="mso-fareast-language:EN-US">Hi Mika, Sebastian,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-BE" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="FR-BE" style="mso-fareast-language:EN-US">As always, it is a pleasure to hear from you!<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-BE" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="FR-BE" style="mso-fareast-language:EN-US">Thank you for both your answers, they are very helpful. </span><span lang="FR-BE" style="font-family:"Segoe UI Emoji",sans-serif;mso-fareast-language:EN-US">😊</span><span lang="FR-BE" style="mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-BE" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="FR-BE" style="mso-fareast-language:EN-US">Have a nice evening/weekend,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-BE" style="mso-fareast-language:EN-US">Jonathan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span lang="FR-BE">--<o:p></o:p></span></p>
<p class="MsoNormal"><b>Jonathan </b><b><span lang="FR-BE">SCOUPREMAN</span></b> |
<a href="mailto:jscoupreman@excellium-services.lu">jscoupreman@excellium-services.<span lang="FR-BE">lu</span></a><span lang="FR-BE"> |
</span>PGP Key ID: <a href="http://pgp.circl.lu/pks/lookup?op=vindex&fingerprint=on&search=0x6802c48ead971c07">
0xAD971C07</a><o:p></o:p></p>
<p class="MsoNormal"><b><span lang="FR-BE">CERT-XLM</span></b><span lang="FR-BE"> |
<a href="mailto:cert@excellium-services.com">cert@excellium-services.com</a> | PGP Key ID:
<a href="http://pgp.circl.lu/pks/lookup?op=vindex&fingerprint=on&search=0x67B311E5D74E5AC0">
0xD74E5AC0</a><o:p></o:p></span></p>
<p class="MsoNormal"><b>CERT-XLM Incident Handler</b><span lang="FR-BE"> @ <a href="https://excellium-services.com/">
excellium-services.com</a><o:p></o:p></span></p>
<p class="MsoNormal">Excellium Services S.A. | 5 rue Goell L-5326 Contern<o:p></o:p></p>
<p class="MsoNormal">Mobile: +352 691 982 790<o:p></o:p></p>
<p class="MsoNormal"><span lang="FR-BE">Emergency: +352 262 039 64 708 | <a href="mailto:emergency@excellium-services.com">
emergency@excellium-services.com</a> | PGP Key ID: <a href="https://excellium-services.com/assets/EMERGENCY_PKEY.asc">
0x42662EFE</a><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> IntelMQ-users <intelmq-users-bounces@lists.cert.at>
<b>On Behalf Of </b>Sebix<br>
<b>Sent:</b> vendredi 17 décembre 2021 16:19<br>
<b>To:</b> intelmq-users <intelmq-users@lists.cert.at><br>
<b>Subject:</b> Re: [IntelMQ-users] [IntelMQ] Question about harmonization.conf<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" align="left" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="background:#A6A6A6;padding:5.25pt 1.5pt 5.25pt 1.5pt"></td>
<td width="100%" style="width:100.0%;background:#EAEAEA;padding:5.25pt 3.75pt 5.25pt 11.25pt">
<div>
<p class="MsoNormal" style="mso-element:frame;mso-element-frame-hspace:2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element-anchor-horizontal:column;mso-height-rule:exactly">
<span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif;color:#212121">You don't often get email from
<a href="mailto:sebix@sebix.at">sebix@sebix.at</a>. <a href="http://aka.ms/LearnAboutSenderIdentification">
Learn why this is important</a><o:p></o:p></span></p>
</div>
</td>
<td width="75" style="width:56.25pt;background:#EAEAEA;padding:5.25pt 3.75pt 5.25pt 3.75pt;align:left">
</td>
</tr>
</tbody>
</table>
<div>
<p>Dear Jonathan, dear Mika,<o:p></o:p></p>
<p>On 12/17/21 1:12 PM, Jonathan SCOUPREMAN via IntelMQ-users wrote:<br>
> Could you please tell me the difference? Unfortunately, I was not able to find hints in the current documentation.<o:p></o:p></p>
<p>Yeah, that part is missing in the docs, it was only part of (my) presentations/workshops. Needless to say: PRs for the Docs and other contributions are always welcome :)<o:p></o:p></p>
<p>> Also, as I see «report», does that mean IntelMQ has a reporting capability ? As far as I know IntelMQ doesn’t provide a reporting capability, hence my doubt.
<span style="font-family:"Segoe UI Emoji",sans-serif">😊</span><o:p></o:p></p>
<p>Depends very much on your understand of reporting.<o:p></o:p></p>
<div>
<p class="MsoNormal">On 12/17/21 3:17 PM, Mika Silander wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"> I'll stop here in the hope the above helps. More seasoned developers may continue from hereon (and correct me along the way if necessary).<o:p></o:p></span></p>
</div>
</blockquote>
<p>Excellent answer, haven't found anything to correct ;)<o:p></o:p></p>
<p>Small additions for context:<o:p></o:p></p>
<p>The report contains just raw data fetched from the source, plus some metadata of the collection process which may be needed or useful afterwards.<o:p></o:p></p>
<p>In IntelMQ 3.0 we have renamed the "Data Harmonization Ontology" to "IntelMQ/Internal Data Format" (IDF). The choice to name the data format "Harmonization" comes from the fact that, in the beginnings of IntelMQ back in 2015, Thomas Lima harmonized different
format that were out there, most importantly AbuseHelper and ElasticSearch's ECS. The file name harmonization.conf is just a leftover from the recent renaming, which we intentionally left as is to minimize the migration burden and wait for other potential
refactorings in this area (e.g. moving the file elsewhere, changing the format, completely obsolete it, ... whatever).<o:p></o:p></p>
<p>Sebastian<o:p></o:p></p>
</div>
</div>
This email is confidential and may contain legally privileged information. If you are not the intended recipient, you should not copy, distribute, disclose or use the information it contains, please e-mail the sender immediately and delete this message from
your system. Note: e-mails are susceptible to corruption, interception and unauthorised amendment; we do not accept liability for any such changes, or for their consequences. You should be aware that we may monitor your e-mails and their content. Excellium
Services SA.
</body>
</html>