CERT-FR's IOC about tinycheck

[felixaime]

Hello,

Sorry for the late reply, I don't have internet since few weeks. Yeah, it is possible that they are MISP-or-whatever formatted. You can try with jq to get the IOCs, here is a command line example:

curl -s https://www.cert.ssi.gouv.fr/uploads/CERTFR-2021-IOC-003-IOC.json 2>&1 | jq -r '.Event.Attribute[].value'

And then, copy paste the result in the backend.

Félix.

[18info]

Hello,
No problem about the delay, thanks for reply.
I ran a loop to download all of them (see AD) and cleaned it out since I found dates, e-mail addresses or URL
cert-fr_iocs.txt
I try it by copy/past, TC seems to stop randomly before the end.
Is there a limit to import or something like this?

Thanks again,

[felixaime]

Yeah,

I've seen that the other day by adding the Pegasus-liked domains.
I'll see how to work on that, maybe import them in bulk in the next update and not one by one...

Félix.

[18info]

Many thanks, Félix! :)