Sha256: 610dbafd959e8d54d79f6b8df59fecb40cc4fd14dee102f85d47d88e745ea8fe
Contents?: true
Size: 1.11 KB
Versions: 8
Compression:
Stored size: 1.11 KB
Contents
# frozen_string_literal: true
require "onyphe"
module Mihari
module Analyzers
class Onyphe < Base
param :query
option :title, default: proc { "Onyphe search" }
option :description, default: proc { "query = #{query}" }
option :tags, default: proc { [] }
def artifacts
results = search
return [] unless results
flat_results = results.map do |result|
result["results"]
end.flatten.compact
flat_results.filter_map { |result| result["ip"] }.uniq
end
private
PAGE_SIZE = 10
def configuration_keys
%w[onyphe_api_key]
end
def api
@api ||= ::Onyphe::API.new(Mihari.config.onyphe_api_key)
end
def search_with_page(query, page: 1)
api.simple.datascan(query, page: page)
end
def search
responses = []
(1..Float::INFINITY).each do |page|
res = search_with_page(query, page: page)
responses << res
total = res["total"].to_i
break if total <= page * PAGE_SIZE
end
responses
end
end
end
end
Version data entries
8 entries across 8 versions & 1 rubygems