Hi,
It looks to me there's been a small rename of a feed in the Shadowserver offering: Accessible-MS-RPC-Endpoint-Mapper is now Accessible-MS-RPC-Service and the following changes are needed to https://github.com/The-Shadowserver-Foundation/report_schema/reports.json :
- "name" : "Accessible-MS-RPC-Endpoint-Mapper", - "url" : "https://www.shadowserver.org/what-we-do/network-reporting/ms-rpc-endpoint-ma..." + "name" : "Accessible-MS-RPC-Service", + "url" : "https://www.shadowserver.org/what-we-do/network-reporting/accessible-ms-rpc-..."
and intelmq.json :
- "feed_name" : "Accessible-MS-RPC-Endpoint-Mapper", + "feed_name" : "Accessible-MS-RPC-Service", "file_name" : "scan_msrpc", "optional_fields" : [ [ @@ -22247,7 +22247,7 @@ "convert_int" ] ], - "url" : "https://www.shadowserver.org/what-we-do/network-reporting/ms-rpc-endpoint-ma..." + "url" : "https://www.shadowserver.org/what-we-do/network-reporting/accessible-ms-rpc-..."
The field names within appear unchanged.
Br, Mika