On 12 Sep 2018, at 10:23, Sebastian Wagner wagner@cert.at wrote:
Hi,
How do IOCs expire?
Well I can imagine a scenario where you fetch for example IP addresses via intelMQ from a blacklist and you want to expire them at some point (to be defined by the blacklist and/or the user of intelmq).
So, I do see a use-case here.
Sebastian
On 12/09/2018 03.22, joanna@scate.tech wrote:
Hi,
Is there a way of updating outputs such as databases when IOCs expire? Don't want to spend time re-inventing the wheel.
Thanks.
-- // Sebastian Wagner wagner@cert.at - T: +43 1 5056416 7201 // CERT Austria - https://www.cert.at/ // Eine Initiative der nic.at GmbH - https://www.nic.at/ // Firmenbuchnummer 172568b, LG Salzburg
-- Listen-Einstellungen: https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-users
-- // L. Aaron Kaplan kaplan@cert.at - T: +43 1 5056416 78 // CERT Austria - https://www.cert.at/ // Eine Initiative der nic.at GmbH - http://www.nic.at/ // Firmenbuchnummer 172568b, LG Salzburg