intelmq.bots.parsers.eset package

Submodules

intelmq.bots.parsers.eset.parser module

intelmq.bots.parsers.eset.parser.BOT

alias of ESETParserBot

class intelmq.bots.parsers.eset.parser.ESETParserBot(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: Optional[bool] = None)

Bases: ParserBot

Parse data collected from ESET’s TAXII API

common_parse(event, line)
static domains_parse(event, line)
init()
parse(report: Report)

A basic JSON parser. Assumes a list of objects as input to be yield.

parse_line(line, report)

A generator which can yield one or more messages contained in line.

Report has the full message, thus you can access some metadata. Override for your use.

recover_line(line: dict) str

Reverse of parse for JSON pulses.

Recovers a fully functional report with only the problematic pulse. Using a string as input here is not possible, as the input may span over multiple lines. Output is not identical to the input, but has the same content.

Parameters

dict. (The line as) –

Returns

The JSON-encoded line as string.

Return type

str

static urls_parse(event, line)

Module contents