Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FR] Analyzer for observable validation #1305

Closed
nusantara-self opened this issue Dec 23, 2024 · 0 comments
Closed

[FR] Analyzer for observable validation #1305

nusantara-self opened this issue Dec 23, 2024 · 0 comments
Assignees
Labels
category:new-analyzer New analyzer submitted
Milestone

Comments

@nusantara-self
Copy link
Contributor

Feature description
An analyzer to validate observables (IPs, domains, URLs, emails, etc.), ensuring structural correctness and if possible, detecting suspicious patterns like Punycode domains or obfuscated strings.

Describe the solution you'd like

  • Validate data types (IP, domain, URL, email, etc.) for correctness.
  • If possible, flag suspicious indicators like IDNs (Punycode), unusual characters, and suspicious patterns / unicode override characters.
  • Classify observables as valid, invalid, or suspicious.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:new-analyzer New analyzer submitted
Projects
None yet
Development

No branches or pull requests

1 participant