Skip to content

Instantly share code, notes, and snippets.

@joenorton8014

joenorton8014/intel.log

Created July 16, 2018 01:33
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save joenorton8014/07638c416b4e2f8bd6f42d5727daca72 to your computer and use it in GitHub Desktop.
Save joenorton8014/07638c416b4e2f8bd6f42d5727daca72 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
intel.log
joe@DESKTOP-OSSID31:~/recordedfuture/final$ cat intel.log
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path intel
#open 2018-07-15-14-37-37
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p seen.indicator seen.indicator_type seen.where seen.node matched sources fuid file_mime_type file_desc
#types time string addr port addr port string enum enum string set[enum] set[string] string string string
1531663865.844578 CVrPZ72bEBI5x8A5bl 10.0.0.38 34154 5.79.71.225 9999 5.79.71.225 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531663899.163328 CrpvDh3OUtdnuCTBT1 10.0.0.38 34257 5.188.86.198 9999 5.188.86.198 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531663928.617444 C1dvjc4sF5qhC5WnE5 10.0.0.38 46171 5.188.86.206 9999 5.188.86.206 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531663976.659446 CNxGtS3ReDyTAhd3Q1 10.0.0.38 49754 5.188.86.207 9999 5.188.86.207 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531663977.109746 CRiigC3Sr60CqfIA5 10.0.0.38 41295 5.188.86.167 9999 5.188.86.167 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531663980.565162 Cuzv0uRcIKwuttZH8 10.0.0.38 41271 5.188.86.197 9999 5.188.86.197 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531663986.081301 CXl5HiVIySaLN2EEg 10.0.0.38 59999 5.188.86.170 9999 5.188.86.170 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531663986.415244 Cq2pm7czlp0iVNZ2l 10.0.0.38 39660 5.188.86.195 9999 5.188.86.195 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531663986.901182 CmQmlF1bKPPI6Y6g5 10.0.0.38 33739 5.188.86.165 9999 5.188.86.165 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531664011.009233 CMUHVnN3pNQugAiU1 10.0.0.38 37351 5.188.86.168 9999 5.188.86.168 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531664015.562800 C8SPAq19dyhvFU0bG9 10.0.0.38 62279 5.79.71.205 9999 5.79.71.205 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531664035.627210 CNZSJ41UwHZTNKFMlb 10.0.0.38 64417 5.188.86.194 9999 5.188.86.194 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531664036.533159 Cri9W41dQIb7jXr6Ui 10.0.0.38 44591 5.188.86.174 9999 5.188.86.174 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531664039.383210 Cmn8Bd25SbtQBwmXyl 10.0.0.38 37490 5.188.86.169 9999 5.188.86.169 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531664039.765424 CBNp7D46c1xQXGLql 10.0.0.38 33002 5.188.86.209 9999 5.188.86.209 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531664046.305657 CpH7d03ns8HTL34pV6 10.0.0.38 56115 5.188.86.208 9999 5.188.86.208 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
1531664142.530821 CS0KAl2bzwjDBqSIGf 10.0.0.38 60181 14.161.6.171 9999 14.161.6.171 Intel::ADDR Conn::IN_RESP bro Intel::ADDR rec-future - - -
#close 2018-07-15-14-37-37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment