New analyzers and templates for RiskIQ Illuminate

[aeetos]

Introduces new analyzers and templates for RiskIQ Illuminate.

RiskIQ Illuminate is the next-generation product from RiskIQ, the company behind PassiveTotal. Many of these new analyzers overlap with datasets already in use in the existing PassiveTotal analyzers, but we wanted to take a fresh approach to their presentation and code, and also leverage our newly-updated passivetotal Python library. This helps ensures no breaking changes for existing users of the PassiveTotal analyzers.

We are also offering a pattern for testing analyzers and automatically generating JSON service files (see _services.py for details). This helped us quickly test our analyzers at the command line and ensured consistency in the JSON service files. It may be something to consider adding to your cortexutils Python library.

Looking forward to hearing your feedback.

-- Mark

[nadouani]

Hello @aeetos thanks for the great job. We will review this PR for 3.1.0 release. We will ask you for some more inputs, specially for the documentation/screenshots/logos etc...

[jeromeleonard]

Hello @aeetos,

I'm currently reviewing your PR. Before merging it, I wonder if you could share some screenshots for analyzer reports ? Thus, I could update analyzers definition files and make them being displayed in the documentation site (To have a page like this one: https://thehive-project.github.io/Cortex-Analyzers/analyzers/DomainToolsIris/).

Indeed, the documentation site is automatically built with the help of json files and content (https://thehive-project.github.io/Cortex-Analyzers/dev_guides/analyzers_definition/)