Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow to do customized feeds lookups #98

Open
mlodic opened this issue Dec 28, 2022 · 2 comments
Open

Allow to do customized feeds lookups #98

mlodic opened this issue Dec 28, 2022 · 2 comments
Assignees

Comments

@mlodic
Copy link
Member

mlodic commented Dec 28, 2022

We could add more ways to extract data feeds from GB other than "recent" and "persistent" which are free.

These new ways must be protected with authentication to avoid abuse.

We could give the users the chance to:

  • download the data extracted in the last X hours (customization of "recent")
  • download the data that was seen more than X times in the last X days (customization of "persistent")
@mlodic mlodic changed the title Allow to do customized lookups Allow to do customized feeds lookups Dec 28, 2022
@regulartim
Copy link
Collaborator

What kind of abuse do you want to prevent? Someone downloading a huge number of IOCs?

@regulartim regulartim self-assigned this Jan 2, 2025
@mlodic
Copy link
Member Author

mlodic commented Jan 2, 2025

While "recent" and "persistent" are fixed sets and, as such, they are easily cachable, allowing to do "customized" lookups could be intensive if the queries are not efficient, extract too much data and so on.

My primary concern is to avoid having to manage server issues for the Honeynet instance. I understand that in different circumstances that could not be important so I think that the authentication could be optional.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants