<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 10pt; color: #000000"><div>Hi Guillaume,</div><div><br data-mce-bogus="1"></div><div> Not entirely sure as to why you need to decode parts of your Modify expert's configurations, but in intelmq/lib/utils.py you have the base64_encode and base64_decode functions that may be of use to you.</div><div>Testing and experimenting what decoded and encoded data looks like can also be achieved on the command line, e.g. (on Ubuntu with the base64 executable provided by the coreutils package):</div><div><br data-mce-bogus="1"></div><div>echo "a text sample" | base64 | base64 -d -</div><div><br data-mce-bogus="1"></div><div>gives </div><div><br data-mce-bogus="1"></div><div>a text sample</div><div><br data-mce-bogus="1"></div><div> I hope this helps.</div><div><br data-mce-bogus="1"></div><div>Br, Mika</div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>"Guillaume GRANJON DE LEPINEY via IntelMQ-users" <intelmq-users@lists.cert.at><br><b>To: </b>"intelmq-users@lists.cert.at" <intelmq-users@lists.cert.at><br><b>Sent: </b>Wednesday, 19 October, 2022 11:28:31<br><b>Subject: </b>[IntelMQ-users] Modify expert get the value of data<br></div><div><br><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style></div><div data-marker="__QUOTED_TEXT__">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello,</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">This may be a silly question, but I can't find the answer.</span></p>
<p class="MsoNormal"><span lang="EN-US">Is it possible to get the decoded value (not base 64) of my data in a configuration file of the bot intelmq.bots.experts.modify.expert?</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">I would like to do something like that with the decoded value:</span></p>
<p class="MsoNormal"><span lang="EN-US"><img width="1029" height="199" style="width:10.7187in;height:2.0729in" id="Image_x0020_1" src="cid:image001.png@01D8E3A5.79043EE0"></span><span lang="EN-US"></span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">Regards,</span></p>
<p class="MsoNormal"><span lang="EN-US">
</span></p>
<p class="MsoNormal"><b>Guillaume GRANJON de LÉPINEY</b> |
<a href="mailto:ggranjon@excellium-services.be" target="_blank" rel="nofollow noopener noreferrer"><span style="color:#0563c1">ggranjon@excellium-services.be</span></a> | PGP Key ID:
<a href="https://pgp.circl.lu/pks/lookup?search=0xE2FD5ED1&fingerprint=on&op=index" target="_blank" rel="nofollow noopener noreferrer">
<span style="color:#0563c1">0xE2FD5ED1</span></a><br>
<b>CERT-XLM</b> | <a href="mailto:cert@excellium-services.com" target="_blank" rel="nofollow noopener noreferrer"><span style="color:#0563c1">cert@excellium-services.com</span></a> | PGP Key ID:
<a href="http://pgp.circl.lu/pks/lookup?op=vindex&fingerprint=on&search=0x67B311E5D74E5AC0" target="_blank" rel="nofollow noopener noreferrer">
<span style="color:#0563c1">0xD74E5AC0</span></a> </p>
<p class="MsoNormal"><span lang="EN-US">Excellium Services
</span><span lang="EN-US">Belgium N.V.</span><span lang="EN-US"> |
</span><span lang="EN-US">Orion Bldg, Belgicastraat 13, B-1930 Zaventem, Belgium<br>
Mobile: </span><span lang="EN-US">+32 4 71 98 57 65</span></p>
<p class="MsoNormal"><span lang="EN-US">Emergency: +352 262 039 64 708 |
</span><a href="mailto:emergency@excellium-services.com" target="_blank" rel="nofollow noopener noreferrer"><span lang="EN-US" style="color:#0563c1">emergency@excellium-services.com</span></a><span lang="EN-US"> | PGP Key ID:
</span><a href="https://excellium-services.com/assets/EMERGENCY_PKEY.asc" target="_blank" rel="nofollow noopener noreferrer"><span lang="EN-US" style="color:#0563c1">0x42662EFE</span></a><span lang="EN-US"></span></p>
<p class="MsoNormal"><span lang="EN-US"><a href="https://excellium-services.com/en/CERT-XLM/" target="_blank" rel="nofollow noopener noreferrer"><span style="color:#0563c1">https://excellium-services.com/en/CERT-XLM/</span></a></span></p>
<p class="MsoNormal"><span lang="EN-US"><a href="https://www.trusted-introducer.org/directory/teams/cert-xlm.html" target="_blank" rel="nofollow noopener noreferrer"><span style="color:#0563c1">https://www.trusted-introducer.org/directory/teams/cert-xlm.html</span></a></span></p>
<p class="MsoNormal"><span lang="EN-US"><a href="https://www.first.org/members/teams/cert-xlm" target="_blank" rel="nofollow noopener noreferrer"><span style="color:#0563c1">https://www.first.org/members/teams/cert-xlm</span></a></span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
</div>
This email is confidential and may contain legally privileged information. If you are not the intended recipient, you should not copy, distribute, disclose or use the information it contains, please e-mail the sender immediately and delete this message from
your system. Note: e-mails are susceptible to corruption, interception and unauthorised amendment; we do not accept liability for any such changes, or for their consequences. You should be aware that we may monitor your e-mails and their content. Excellium
Services SA.
<br>-- <br>List settings:<br> https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-users<br>IntelMQ Documentation: https://intelmq.readthedocs.io/<br></div></div></body></html>