adulau/dcu-tools
1
0
Fork 0
mirror of https://github.com/adulau/dcu-tools.git synced 2024-12-23 01:06:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

Documentation updated

Browse source
This commit is contained in:
Alexandre Dulaunoy 2013-02-07 12:01:09 +01:00
parent cb61f4e217
commit ee10433bd5
1 changed files with 34 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
README.md
View file

@ -2,3 +2,36 @@ dcu-tools
========= =========
dcu-tools are tools used for fetching and analyzing (private) Microsoft Digital Crimes Unit feeds dcu-tools are tools used for fetching and analyzing (private) Microsoft Digital Crimes Unit feeds
Usage
=====
Usage: dcu-fetch.py [options] dcu feed blob fetcher
Options:
-h, --help show this help message and exit
-d, --debug output debug message on stderr
-a ACCOUNT_NAME, --account_name=ACCOUNT_NAME
Microsoft Azure account name
-k ACCOUNT_KEY, --account_key=ACCOUNT_KEY
Microsoft Azure key to access DCU container
-c, --clear Delete blobs and containers after fetching
-e, --header Remove field header in the output (default is
displayed)
-f OUTPUT_FORMAT, --format=OUTPUT_FORMAT
output txt, json (default is txt)
Dumping sink-hole addresses
---------------------------
python ./bin/dcu-fetch.py -a <azure feed> -k "<azure key>" -f json | jq -r .TargetIp
Dumping some values and cleaning the container/blobs
----------------------------------------------------
python ./bin/dcu-fetch.py -a <azure feed> -k "<azure key>" -f json | jq -r '.SourceIpAsnNr+" "+.SourceIp +" "+ .Botnet'
Dumping the JSON object for a specific ASN
------------------------------------------
python ./bin/dcu-fetch.py -a <azure feed> -k "<azure key>" -f json | jq -r 'if .SourceIpAsnNr == "AS12345" then . else "" end'