Description
Add an official observable analyzer that calls the isMalicious GET /check API for ip, domain, and url observables.
- Python module:
api_app.analyzers_manager.observable_analyzers.ismalicious.IsMalicious
- Auth: secret
api_key_name sent as X-API-KEY
- Health check: class attribute
url (default https://api.ismalicious.com)
- Not added to
FREE_TO_USE_ANALYZERS (requires an API key; free-tier keys exist but are still secrets)
I will open a PR against develop with the analyzer, a dumpplugin-style data migration, and a unit test that mocks requests.get.
Reference: https://ismalicious.com/integrations/intelowl
Description
Add an official observable analyzer that calls the isMalicious
GET /checkAPI forip,domain, andurlobservables.api_app.analyzers_manager.observable_analyzers.ismalicious.IsMaliciousapi_key_namesent asX-API-KEYurl(defaulthttps://api.ismalicious.com)FREE_TO_USE_ANALYZERS(requires an API key; free-tier keys exist but are still secrets)I will open a PR against
developwith the analyzer, a dumpplugin-style data migration, and a unit test that mocksrequests.get.Reference: https://ismalicious.com/integrations/intelowl