Sha256: cbeff6ae96ca4ec0a514d2c3262382a872db7aa19f1becd94168336c25f8e069
Contents?: true
Size: 1.59 KB
Versions: 13
Compression:
Stored size: 1.59 KB
Contents
# frozen_string_literal: true
require "hachi"
require "net/ping"
module Mihari
module Emitters
class TheHive < Base
# @return [Boolean]
def valid?
api_endpont? && api_key? && ping?
end
def emit(title:, description:, artifacts:, tags: [], **_options)
return if artifacts.empty?
api.alert.create(
title: title,
description: description,
artifacts: artifacts.map { |artifact| { data: artifact.data, data_type: artifact.data_type, message: description } },
tags: tags,
type: "external",
source: "mihari"
)
end
private
def configuration_keys
%w[thehive_api_endpoint thehive_api_key]
end
def api
@api ||= Hachi::API.new(api_endpoint: Mihari.config.thehive_api_endpoint, api_key: Mihari.config.thehive_api_key)
end
#
# Check whether an API endpoint is set or not
#
# @return [Boolean]
#
def api_endpont?
!Mihari.config.thehive_api_endpoint.nil?
end
#
# Check whether an API key is set or not
#
# @return [Boolean]
# ]
def api_key?
!Mihari.config.thehive_api_key.nil?
end
#
# Check whether an API endpoint is reachable or not
#
# @return [Boolean]
#
def ping?
base_url = Mihari.config.thehive_api_endpoint
base_url = base_url.end_with?("/") ? base_url[0..-2] : base_url
url = "#{base_url}/index.html"
http = Net::Ping::HTTP.new(url)
http.ping?
end
end
end
end
Version data entries
13 entries across 13 versions & 1 rubygems