[IntelMQ-dev] A suitable collector for the Abusech Feodo Tracker feed
Mika Silander
mika.silander at csc.fi
Fri Dec 13 13:29:39 CET 2024
Hi,
I'm attempting to find a suitable collector for retrieving the Abusech Feodo Tracker feed (https://feodotracker.abuse.ch/downloads/ipblocklist.json). Afaiks, the ready-made Abusech Feodo Tracker parser expects reports in plain JSON but the available http collectors are manipulating the retrieved information in one way or the other before passing it on to the parser. This makes me doubt the success of parsing the incoming reports using the said parser. Or should I try downloading the report in CSV format instead and have a CSV parser take care of the parsing?
All hints are welcome.
Best regards, Mika
More information about the IntelMQ-dev
mailing list