MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

Freetext import tuning 

- refanging of various . notations
pull/1106/head
Iglocska 2016-04-20 10:04:36 +02:00
parent 90d5c57993
commit 4d57149e75
1 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
app/Lib/Tools/ComplexTypeTool.php
View File

@ -1,6 +1,15 @@
<?php
class ComplexTypeTool {
private $__refangRegexTable = array(
'/^hxxp/i' => 'http',
'/\[\.\]/' => '.',
'/\[dot\]/' => '.',
'/\\\./' => '.',
'/\.+/' => '.'
);
public function checkComplexRouter($input, $type) {
switch ($type) {
case 'File':
@ -114,9 +123,8 @@ class ComplexTypeTool {
if (strlen($input) == $k && preg_match("#[0-9a-f]{" . $k . "}$#i", $input)) return array('types' => $v['single'], 'to_ids' => true, 'default_type' => $v['single'][0]);
}
if (preg_match('#^[0-9]+:.+:.+$#', $input)) return array('types' => array('ssdeep'), 'to_ids' => true, 'default_type' => 'ssdeep');
$inputRefanged = preg_replace('/^hxxp/i', 'http', $input);
$inputRefanged = preg_replace('/\[\.\]/', '.' , $inputRefanged);
$inputRefanged = $input;
foreach ($this->__refangRegexTable as $regex => $replacement) $inputRefanged = preg_replace($regex, $replacement , $inputRefanged);
$inputRefanged = rtrim($inputRefanged, ".");
if (strpos($input, '@') !== false) {
if (filter_var($input, FILTER_VALIDATE_EMAIL)) return array('types' => array('email-src', 'email-dst'), 'to_ids' => true, 'default_type' => 'email-src');