[Intelmq-users] Updating datastores

[L. Aaron Kaplan]

> On 12 Sep 2018, at 10:23, Sebastian Wagner <wagner at cert.at> wrote:
> 
> Hi,
> 
> How do IOCs expire?
> 

Well I can imagine a scenario where you fetch for example IP addresses via intelMQ
from a blacklist and you want to expire them at some point (to be defined by the blacklist and/or the user of intelmq).

So, I do see a use-case here.


> Sebastian
> 
> On 12/09/2018 03.22, joanna at scate.tech wrote:
>> Hi,
>> 
>> Is there a way of updating outputs such as databases when IOCs expire?
>> Don't want to spend time re-inventing the wheel.
>> 
>> Thanks.
> 
> --
> // Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
> // CERT Austria - https://www.cert.at/
> // Eine Initiative der nic.at GmbH - https://www.nic.at/
> // Firmenbuchnummer 172568b, LG Salzburg
> 
> 
> --
> Listen-Einstellungen:
> https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-users


--
// L. Aaron Kaplan <kaplan at cert.at> - T: +43 1 5056416 78
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - http://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg






-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20180912/eb8908dc/attachment.sig>