28 lines
752 B
Python
28 lines
752 B
Python
|
#!/usr/bin/env python3
|
||
|
|
# -*- coding: utf-8 -*-
|
||
|
|
|
||
|
|
import requests
|
||
|
|
import json
|
||
|
|
import datetime
|
||
|
|
|
||
|
|
url = 'https://data.iana.org/TLD/tlds-alpha-by-domain.txt'
|
||
|
|
r = requests.get(url)
|
||
|
|
tlds = []
|
||
|
|
for tld in r.text.splitlines():
|
||
|
|
if tld.startswith('#'):
|
||
|
|
continue
|
||
|
|
tlds.append(tld)
|
||
|
|
|
||
|
|
warninglist = {
|
||
|
|
'name': 'TLDs as known by IANA',
|
||
|
|
'version': int(datetime.date.today().strftime('%Y%m%d')),
|
||
|
|
'description': 'Event contains one or more TLDs as attribute with an IDS flag set',
|
||
|
|
'list': sorted(set(tlds)),
|
||
|
|
'matching_attributes': ["hostname", "domain", "domain|ip"],
|
||
|
|
'type': 'string',
|
||
|
|
}
|
||
|
|
|
||
|
|
with open('../lists/tlds/list.json', 'w') as data_file:
|
||
|
|
json.dump(warninglist, data_file, indent=2, sort_keys=True)
|
||
|
|
data_file.write("\n")
|