MISP
/
mail_to_misp
mirror of https://github.com/MISP/mail_to_misp
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge branch 'master' of github.com:rommelfs/mail_to_misp

pull/4/head
Sascha Rommelfangen 2017-05-24 16:15:57 +02:00
parent 3c3bb6c18e 26ec0ae6cc
commit e7c46b2cea
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@ -1,6 +1,6 @@
# mail_to_misp
Connect your mail client to [MISP](https://github.com/MISP/MISP) in order to create events based on the information contained within mails.
Connect your mail infrastructure to [MISP](https://github.com/MISP/MISP) in order to create events based on the information contained within mails.
## Features
@ -105,9 +105,10 @@ You should now be able to send your IoC-containing mails to misp_handler@YOURDOM
### General
- mail_to_misp requires access to a MISP instance (via API).
- Python 3
- urlmarker from https://github.com/rcompton/ryancompton.net/blob/master/assets/praw_drugs/urlmarker.py (contained in this project)
- defang from https://bitbucket.org/johannestaas/defang
- Optionally patch defang/defang/__init__.py and add dirty_line = dirty_line.replace('hXXp', 'http') at line 47
- Optionally patch defang/defang/__init__.py and add dirty_line = dirty_line.replace('hxxp', 'http') at line 47
### Thunderbird