intel

Documentation

Index

• Variables
• type IntelHandle
  • func NewIntelHandle(conf *config.Resources) *IntelHandle
  • func (i *IntelHandle) CymruWhoisLookup(addresses []string) []data.IntelData
  • func (i *IntelHandle) Run()

Variables

var CLBadIPAddress = errors.New("CymruLookupRecieved an invalid IP address")

var PEBadCymruFieldCount = errors.New("Line contained incorrect number of fields")

PEBadCymruFieldCount is a Parse Error (PE) generated when not enough fields were given to the parseCymruLine function.

Types

type IntelHandle

type IntelHandle struct {

	// NetcatPath is the path to the netcat executable
	NetcatPath string

	// AgeThreshold is a settable that gives us the number of days that
	// elapse before we recheck data
	AgeThreshold float64
	// contains filtered or unexported fields
}

IntelHandle provides functionality for dealing with intel gathering and handling database interactions for intel objects

func NewIntelHandle

func NewIntelHandle(conf *config.Resources) *IntelHandle

NewIntelHandle uses a config.Resources to generate a new intel handle

func (*IntelHandle) CymruWhoisLookup

func (i *IntelHandle) CymruWhoisLookup(addresses []string) []data.IntelData

CymruWhoisLookup takes a list of ip addresses and does a batch lookup against the team cymru lookup server

func (*IntelHandle) Run

func (i *IntelHandle) Run()

Run builds onto the HostIntelDB by running all of the current external hosts