-
Notifications
You must be signed in to change notification settings - Fork 132
/
rss.example.yml
135 lines (110 loc) · 3.1 KB
/
rss.example.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
# This is an example ThreatIngestor config file with some preconfigured RSS
# sources, feeding extracted artifacts into a CSV file.
general:
# Run forever, check feeds once an hour.
daemon: true
sleep: 3600
state_path: state.db
sources:
# A few threat intel blogs to get you started!
- name: rss-inquest
module: rss
url: https://inquest.net/blog/rss
feed_type: messy
- name: rss-carbonblack
module: rss
url: http://www.carbonblack.com/feed/
feed_type: messy
- name: rss-paloaltonetworks
module: rss
url: http://feeds.feedburner.com/Unit42
feed_type: messy
- name: rss-securelist
module: rss
url: https://securelist.com/feed/
feed_type: messy
- name: rss-volexity
module: rss
url: https://www.volexity.com/blog/feed/
feed_type: messy
- name: rss-fireeye
module: rss
url: https://www.fireeye.com/blog/threat-research/_jcr_content.feed
feed_type: messy
- name: rss-threatconnect
module: rss
url: http://feeds.feedburner.com/threatconnect-blogs?format=xml
feed_type: messy
- name: rss-baesystemsai
module: rss
url: http://baesystemsai.blogspot.com/feeds/posts/default?alt=rss
feed_type: messy
- name: rss-talos
module: rss
url: http://feeds.feedburner.com/feedburner/Talos
feed_type: messy
- name: rss-clearskysec
module: rss
url: http://www.clearskysec.com/feed/
feed_type: messy
- name: rss-anomali
module: rss
url: https://www.anomali.com/site/blog-rss
feed_type: messy
- name: rss-volexity
module: rss
url: https://www.volexity.com/blog/feed/
feed_type: messy
- name: rss-blog-malwarebytes
module: rss
url: https://blog.malwarebytes.com/feed/
feed_type: messy
- name: rss-blog-malwaremustdie
module: rss
url: http://blog.malwaremustdie.org/atom.xml
feed_type: messy
- name: rss-us-cert-gov
module: rss
url: https://www.us-cert.gov/ncas/alerts.xml
feed_type: messy
- name: rss-blog-fox-it
module: rss
url: https://blog.fox-it.com/feed/
feed_type: messy
- name: rss-citizenlab-ca
module: rss
url: https://citizenlab.ca/feed/
feed_type: messy
- name: rss-blog-shadowserver
module: rss
url: http://blog.shadowserver.org/feed/
feed_type: messy
- name: rss-riskiq
module: rss
url: https://www.riskiq.com/feed/
feed_type: messy
- name: rss-thembits
module: rss
url: http://thembits.blogspot.com/feeds/posts/default
feed_type: messy
- name: rss-feeds-trendmicro
module: rss
url: http://feeds.trendmicro.com/Anti-MalwareBlog/
feed_type: messy
- name: rss-techhelplist
module: rss
url: http://techhelplist.com/index.php/spam-list?format=feed&type=rss
feed_type: clean
- name: rss-vxsecurity-sg
module: rss
url: http://www.vxsecurity.sg/feed/
feed_type: messy
- name: rss-malwarebreakdown
module: rss
url: https://malwarebreakdown.com/feed/
feed_type: messy
operators:
# This is just an example CSV output, to make this a valid config.
- name: csvfile
module: csv
filename: output.csv