Skip to content

Ability to add known malicious data into soc-faker #7

@joshswimlane

Description

@joshswimlane

As a user of soc-faker I would like to provide a list or pool of data that I want soc-faker to use when selecting random data so that I can trigger integrations or workflows when a malicious ip, hash, etc. is identified.

Example or original thought idea was the ability to provide a Pool object with specified names of keys and list values to use.

from socfaker import SocFaker, Pool

pool = Pool(
    'md5': [],
    'ipv4': [],
    # etc.
)

sc = SocFaker(pool=pool)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions