- IntelMQ-users

Integrate intelmq
by Soni, Drupad 07 Apr '21

07 Apr '21

Hi Sebastian, We want to integrate Intelmq with MISP using feeds/API. Please guide us through we went through documentation of output bots. We are unable to figure out a way through. Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advis… ********************************************************************** KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India). ******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1(a)kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it. KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses. KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such. “Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

3 3

clicking "Login" button does not pop up user/pw panel
by moto kawasaki 07 Apr '21

07 Apr '21

Hi list members, Please help me to setup intelmq-manager, thanks in advance. I am working on FreeBSD12.2p4 with pip installed intelmq-{core,api,manager}. Python is 3.7.9. Intelmq(-core) is working like; $ intelmqctl status Bot cymru-whois-expert is running. Bot deduplicator-expert is running. Bot feodo-tracker-browse-collector is running. Bot feodo-tracker-browse-parser is running. Bot file-output is running. Bot gethostbyname-1-expert is running. Bot gethostbyname-2-expert is running. Bot malc0de-parser is running. Bot malc0de-windows-format-collector is running. Bot spamhaus-drop-collector is running. Bot spamhaus-drop-parser is running. Bot sql is running. Bot taxonomy-expert is running. Bot url2fqdn-expert is running. Apahce httpd 2.4 is configured like; ### intelmq_api LoadModule wsgi_module libexec/apache24/mod_wsgi.so <IfModule mod_wsgi.c> WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On WSGIScriptAlias /api /usr/local/lib/python3.7/site-packages/intelmq_api/intelmq-api.wsgi </IfModule> <Directory /usr/local/lib/python3.7/site-packages/intelmq_api/> Require all granted </Directory> ### intelmq_manager Alias /intelmq-manager /usr/local/lib/python3.7/site-packages/intelmq_manager/html <Directory /usr/local/lib/python3.7/site-packages/intelmq_manager/html> Require all granted <IfModule mod_headers.c> Header set Content-Security-Policy "script-src 'self" Header set X-Content-Security-Policy "script-src 'self" </IfModule> </Directory> sudo is configured like; $ cat /usr/local/etc/sudoers.d/intelmqapi intelmq ALL=(intelmq) NOPASSWD: /usr/local/bin/intelmqctl www ALL=(intelmq) NOPASSWD: /usr/local/bin/intelmqctl apache httpd is running as user=www. I can see the IntelMQ Manager's top page with panels of Configuration, Management, Monitor, Check, and About. I also can see the Login button on top-right corner of this page. Now, the problem is nothing happens when I click the Login button, nothing appears on the httpd-{access,error}.log when clicked, seems nothing been transferred from the browser to the server (checked via tcpdump). Please advice me what did I miss... Thank you very much. Best Regards, -- moto kawasaki <moto(a)kawasaki3.org> +81-90-2464-8454

2 3

Elasticsearch BOT error
by Soni, Drupad 30 Mar '21

30 Mar '21

Hi Team, We have integrated output for elastic search which resulting into error as below. We have installed Intelmq: 2.3.1 and Elasticsearch, Kibana: 7.12. As per suggestion from your team latest version of Elasticsearch and kibana works perfectly well with Intelmq latest version. Bot initialization failed. Traceback (most recent call last): File "/usr/lib/python3/dist-packages/intelmq/lib/bot.py", line 164, in __init__ self.init() File "/usr/lib/python3/dist-packages/intelmq/bots/outputs/elasticsearch/output.py", line 58, in init raise MissingDependencyError('elasticsearch', version='>=5.0.0,<6.0.0') intelmq.lib.exceptions.MissingDependencyError: Could not load dependency 'elasticsearch', please install it with apt/yum/dnf/zypper (possibly named python3-elasticsearch) or pip3. Please note that this bot requires elasticsearch version >=5.0.0,<6.0.0! Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advis… ********************************************************************** KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India). ******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1(a)kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it. KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses. KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such. “Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

2 2

Fwd: RE: Intelmq Stopped working
by Sebastian Wagner 30 Mar '21

30 Mar '21

Forwarding a held-back message, with the screenshot removed -------- Forwarded Message -------- Subject: RE: Intelmq Stopped working Date: Tue, 30 Mar 2021 07:23:02 +0000 From: Soni, Drupad <drupadsoni(a)kpmg.com> To: intelmq-users(a)lists.cert.at <intelmq-users(a)lists.cert.at> CC: Shah, Kunal <kunalshah3(a)kpmg.com>, Gupta, Anshul <anshulgupta9(a)kpmg.com>, Thakur, Richu <richuthakur(a)kpmg.com> Hi Team, Also, I am sharing apache2 logs. [Tue Mar 30 00:07:52.663070 2021] [mpm_event:notice] [pid 1428:tid 140542945885120] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 config$ [Tue Mar 30 00:07:52.663136 2021] [core:notice] [pid 1428:tid 140542945885120] AH00094: Command line: '/usr/sbin/apache2' [Tue Mar 30 00:07:54.162925 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] Loading config from /etc/intelmq/api-config.j$ [Tue Mar 30 00:07:54.809830 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] mod_wsgi (pid=18601): Exception occurred proc$ [Tue Mar 30 00:07:54.811024 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] Traceback (most recent call last):, referer: $ [Tue Mar 30 00:07:54.811137 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/lib/python3/dist-packages/intelm$ [Tue Mar 30 00:07:54.811164 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] return __hug_wsgi__(environ, start_respon$ [Tue Mar 30 00:07:54.811173 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "hug/api.py", line 500, in hug.api.Mod$ [Tue Mar 30 00:07:54.811182 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "hug/api.py", line 371, in hug.api.HTT$ [Tue Mar 30 00:07:54.811188 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "hug/api.py", line 638, in hug.api.API$ [Tue Mar 30 00:07:54.811195 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/lib/python3/dist-packages/intelm$ [Tue Mar 30 00:07:54.811199 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] intelmq_api.api.initialize_api(api_config$ [Tue Mar 30 00:07:54.811209 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/lib/python3/dist-packages/intelm$ [Tue Mar 30 00:07:54.811232 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] file_access.update_from_runctl(runner.get$ [Tue Mar 30 00:07:54.811243 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/lib/python3/dist-packages/intelm$ [Tue Mar 30 00:07:54.811251 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] return dict(json.load(self.debug(get_path$ [Tue Mar 30 00:07:54.811262 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/lib/python3/dist-packages/intelm$ [Tue Mar 30 00:07:54.811269 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] return self._run_json(args), referer: htt$ [Tue Mar 30 00:07:54.811280 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/lib/python3/dist-packages/intelm$ [Tue Mar 30 00:07:54.811295 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] completed = self._run_intelmq_ctl(["--typ$ [Tue Mar 30 00:07:54.811308 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/lib/python3/dist-packages/intelm$ [Tue Mar 30 00:07:54.811326 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] "command": shell_command_for_errors(comma$ [Tue Mar 30 00:07:54.811368 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] intelmq_api.runctl.IntelMQCtlError: Traceback$ [Tue Mar 30 00:07:54.811377 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/bin/intelmqctl", line 11, in <mo$ [Tue Mar 30 00:07:54.811382 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] load_entry_point('intelmq==2.3.1', 'conso$ [Tue Mar 30 00:07:54.811387 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/lib/python3/dist-packages/intelm$ [Tue Mar 30 00:07:54.811392 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] x = IntelMQController(interactive=True), $ [Tue Mar 30 00:07:54.811398 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] File "/usr/lib/python3/dist-packages/intelm$ [Tue Mar 30 00:07:54.811403 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] self.logging_level = self.parameters.logg$ [Tue Mar 30 00:07:54.811409 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] AttributeError: 'Parameters' object has no at$ [Tue Mar 30 00:07:54.811414 2021] [wsgi:error] [pid 18601:tid 140542679680768] [client 127.0.0.1:40320] , referer: http://localhost/intelmq-manager/c$ Regards, Drupad Soni *KPMG – Cyber Security* Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our *Cyber Security Services* https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advis… *From:* IntelMQ-users <intelmq-users-bounces(a)lists.cert.at> *On Behalf Of *Soni, Drupad via IntelMQ-users *Sent:* Tuesday, March 30, 2021 12:08 PM *To:* intelmq-users(a)lists.cert.at *Cc:* Shah, Kunal <kunalshah3(a)kpmg.com>; Gupta, Anshul <anshulgupta9(a)kpmg.com>; Thakur, Richu <richuthakur(a)kpmg.com> *Subject:* [IntelMQ-users] Intelmq Stopped working Hi Team, We started adding collectors to Intelmq. We did 20 collectors later we rebooted this machine as it was lagging. Now we are not able to login. Please guide us troubleshooting this. Regards, Drupad Soni *KPMG – Cyber Security* Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our *Cyber Security Services* https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advis… ------------------------------------------------------------------------ KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India). ******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1(a)kpmg.com <mailto:postmaster1@kpmg.com>, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it. KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses. KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such. “Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

2 1

Intelmq Stopped working
by Soni, Drupad 30 Mar '21

30 Mar '21

Hi Team, We started adding collectors to Intelmq. We did 20 collectors later we rebooted this machine as it was lagging. Now we are not able to login. Please guide us troubleshooting this. [cid:image001.png@01D7255C.F971E950] Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advis… ********************************************************************** KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India). ******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1(a)kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it. KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses. KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such. “Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

3 3

IntelMQ & API & Manager 2.3.1
by Sebastian Wagner 25 Mar '21

25 Mar '21

Dear community, This IntelMQ version did not gain any major features and is a sole product maintenance release. It covers various minor error corrections in the IntelMQ software, and usability enhancements for the new API. Some notable changes are listed below. Thanks again to all contributors! The installation instructions: https://intelmq.readthedocs.io/en/maintenance/user/installation.html Upgrade instructions: https://intelmq.readthedocs.io/en/maintenance/user/upgrade.html All packages have been published to PyPI. The deb/rpm-repositories and dockerhub are following on Friday. I'm trying to summarize the changes here, the full changelogs are linked below. The Cymru CAP Parser has been adapted to the new format for events of the category "bruteforce" (PR#1795 by Sebastian Wagner, CERT.at, fixes 1794). The Shodan Parser now supports nested conversions, improved protocol detection and has a majorly extended parser mapping (PR#1821 by Mikk Markus Möll, CERT.EE). The feed documentation gained a missing description for the Shodan Country Stream (by Sebastian Wagner, CERT.at). On the documentation front, the ecosystem document received revised sections on intelmq-cb-mailgen and fody (PR#1792 by Bernhard Reiter, Intevation). A new section in the documentation summarizes hardware requirements (PR#1811 by Sebastian Wagner, CERT.at). Minor enhancements and adaptions in the tests. # IntelMQ API-related changes The IntelMQ API documentation now has more details on the required write permission for the session database file (PR#1798 by Birger Schacht, CERT.at, fixes intelmq-api#23). See https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html Session database permission errors: Catch the exception in the code and add a hint to check the permissions of both the file and the directory (PR#25 by Birger Schacht, CERT.at, fixes #23). The tool `intelmqsetup`, which is part of the installation routine for manual IntelMQ installations, is now able to automatically create the required directory layout and file permissions for the IntelMQ API (PR#1787 by Sebastian Wagner, CERT.at, fixes #1783) and as well covers the webserver and sudoers configuration for IntelMQ API and IntelMQ Manager (PR#1805 by Sebastian Wagner, CERT.at, fixes #1803). # IntelMQ Manager-related changes The required authentication token in save-data request of the "Configuration" tab is now sent to the backend (PR#245 by Marcos Gonzalez, CNCSRD-DO, fixes #244). On two locations the link destinations have been fixed, they still linked to the old PHP-based backend URLs: "Clear Configuration" link destination (PR#249 by Sebastian Wagner, CERT.at, fixes #248) and link to configuration page of bot on the monitor page (PR#249 by Sebastian Wagner, CERT.at, fixes #248). # Full changelogs: IntelMQ: https://github.com/certtools/intelmq/releases/tag/2.3.1 IntelMQ API: https://github.com/certtools/intelmq-api/releases/tag/2.3.1 IntelMQ Manager: https://github.com/certtools/intelmq-manager/releases/tag/2.3.1 -- // Sebastian Wagner <wagner(a)cert.at> - T: +43 1 5056416 7201 // CERT Austria - https://www.cert.at/ // Eine Initiative der nic.at GmbH - https://www.nic.at/ // Firmenbuchnummer 172568b, LG Salzburg

1 0

Error accessing intelmq
by Soni, Drupad 19 Mar '21

19 Mar '21

Hi Team, While accessing http://localhost/Intelmq-manager/ I am receiving below error. Please guide in troubleshooting this. I have installed Intelmq using below commands: echo 'deb http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_18.0… /' | sudo tee /etc/apt/sources.list.d/home:sebix:intelmq.list curl -fsSL https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_18.04… | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_sebix_intelmq.gpg > /dev/null sudo apt-get -y update sudo apt-get -y install intelmq sudo apt-get -y install intelmq-manager sudo apt-get -y install Intelmq-api sudo apt-get -y update [cid:image001.png@01D71CA3.B2192BC0] Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advis… ********************************************************************** KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India). ******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1(a)kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it. KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses. KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such. “Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

3 3

Intelmq login username and password
by Soni, Drupad 18 Mar '21

18 Mar '21

Hi Intelmq Team, We have successfully setup Intelmq but we are unable to login . Please help us out with default username and password. I have used intelmq:intelmq also intelmqadmin:intelmqadmin Please see below. [cid:image001.jpg@01D71A81.9E1B94B0] Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advis… ********************************************************************** KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India). ******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1(a)kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it. KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses. KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such. “Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

3 24

Configurations in Intelmq
by Soni, Drupad 18 Mar '21

18 Mar '21

Hi Team, I have a query with the following below, where to store password file and with which extension? Also below it is mentioned on Intelmq-manager edit httpd.conf file. Where to do so? [cid:image001.png@01D71C08.A3E9E5D0] Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advis… ********************************************************************** KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India). ******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1(a)kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it. KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses. KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such. “Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

2 2

Re: [IntelMQ-users] Dependency Resolution problem on CentOS 7
by Marco Teixeira 17 Mar '21

17 Mar '21

Hi there, Please ignore the previous email... i am now stuck at this: --> Finished Dependency Resolution Error: Package: python3-hug-2.6.1-4.4.noarch (home_sebix_intelmq) Requires: python3-falcon You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest Regards, Marco -----Mensagem original----- De: Marco Teixeira Enviada: 16 de março de 2021 18:52 Para: intelmq-users(a)lists.cert.at Assunto: Dependency Resolution problem on CentOS 7 Hello, Can anyone help with the following dependencies error? Thank you Marco === [...] --> Finished Dependency Resolution Error: Package: python3-intelmq-2.3.0-1.1.noarch (home_sebix_intelmq) Requires: /bin/python3.6 Removing: python3-3.6.8-13.el7.x86_64 (@base) Not found Updated By: python3-3.6.8-18.el7.x86_64 (updates) Not found Error: Package: python3-pyasn-1.6.1-1.3.x86_64 (home_sebix_intelmq) Requires: /bin/python3.6 Removing: python3-3.6.8-13.el7.x86_64 (@base) Not found Updated By: python3-3.6.8-18.el7.x86_64 (updates) Not found Error: Package: python3-intelmq-api-2.3.0-1.1.noarch (home_sebix_intelmq) Requires: /bin/python3.6 Removing: python3-3.6.8-13.el7.x86_64 (@base) Not found Updated By: python3-3.6.8-18.el7.x86_64 (updates) Not found Error: Package: python3-hug-2.6.1-4.4.noarch (home_sebix_intelmq) Requires: /bin/python3.6 Removing: python3-3.6.8-13.el7.x86_64 (@base) Not found Updated By: python3-3.6.8-18.el7.x86_64 (updates) Not found Error: Package: python3-hug-2.6.1-4.4.noarch (home_sebix_intelmq) Requires: python3-falcon You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest === $ cat /etc/redhat-release CentOS Linux release 7.8.2003 (Core) ===

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

IntelMQ-users