cifsdk

README

cifsdk-go

Go Implementation of the CIF SDK https://github.com/csirtgadgets/verbose-robot/

Getting Started

$ export CIF_TOKEN=123123123

$ go run cmd/cifsdk-go/main.go  -feed ipv4 -endpoint http://192.168.99.100:5000
77.247.109.205,ipv4,,,3,209299,vitox telecom,identified as sending recursive dns queries to a remote host,dataplane.org
173.249.14.216,ipv4,,,2,51167,contabo gmbh,identified as sending recursive dns queries to a remote host,dataplane.org
81.171.71.127,ipv4,,,2,33438,"highwinds network group, inc.",identified as sending recursive dns queries to a remote host,dataplane.org
81.171.71.128,ipv4,,,2,33438,"highwinds network group, inc.",identified as sending recursive dns queries to a remote host,dataplane.org
...

Documentation

Index

• Constants
• func ToCsv(indicators IndicatorList, ow io.Writer)
• type Client
  • func (c *Client) CreateIndicators(i IndicatorList) error
  • func (c *Client) GetIndicators(itype string, limit string) (IndicatorList, error)
• type Indicator
• type IndicatorList

Constants

const USER_AGENT = "cifsdk-go/" + VERSION

const VERSION = "0.0a3"

VERSION

Functions

func ToCsv

func ToCsv(indicators IndicatorList, ow io.Writer)

Types

type Client

type Client struct {
	Endpoint string
	Token    string
	Debug    bool
}

func (*Client) CreateIndicators

func (c *Client) CreateIndicators(i IndicatorList) error

func (*Client) GetIndicators

func (c *Client) GetIndicators(itype string, limit string) (IndicatorList, error)

type Indicator

type Indicator struct {
	Id          int      `json:"id"`
	Indicator   string   `json:"indicator"`
	Itype       string   `json:"itype"`
	Portlist    string   `json:"portlist"`
	Firsttime   string   `json:"firsttime"`
	Lasttime    string   `json:"lasttime"`
	CreatedAt   string   `json:"created_at"`
	UpdatedAt   string   `json:"updated_at"`
	Description string   `json:"description"`
	Count       int      `json:"count"`
	Asn         float32  `json:"asn"`
	Asn_desc    string   `json:"asn_desc"`
	Cc          string   `json:"cc"`
	Provider    string   `json:"provider"`
	Tags        []string `json:"tags"`
	Content     string   `json:"content"`
}

type IndicatorList

type IndicatorList []Indicator