Files
threatline/threatline/handlers/base.py
Shane Peters 525ecff602 initial commit
2018-11-10 13:29:42 -05:00

101 lines
2.1 KiB
Python

#!/usr/bin/env python
# Ingestion handler
import sys
from functools import partial
class BaseHandler(object):
def __init__(self):
self.settings = {}
self.dispatch = {}
self.mymod = None
def handle_conn(self, message):
return message
def handle_dce_rpc(self, message):
return message
def handle_known_devices(self, message):
return message
def handle_dhcp(self, message):
return message
def handle_dns(self, message):
return message
def handle_files(self, message):
return message
def handle_http(self, message):
return message
def handle_notice(self, message):
return message
def handle_smtp(self, message):
return message
def handle_snmp(self, message):
return message
def handle_software(self, message):
return message
def handle_ssh(self, message):
return message
def handle_ssl(self, message):
return message
def handle_stats(self, message):
return message
def handle_syslog(self, message):
return message
def handle_weird(self, message):
return message
def handle_x509(self, message):
return message
def handle_intel(self, message):
return message
def handle_capture_loss(self, message):
return message
def handle_communication(self, message):
return message
def handle_ntlm(self, message):
return message
def handle_pe(self, message):
return message
def handle_smb_files(self, message):
return message
def handle_smb_mapping(self, message):
return message
def handle_tunnel(self, message):
return message
def handle_rdp(self, message):
return message
def initialize(self):
for lm in dir(self.mymod):
if lm.startswith('handle_'):
name = lm.replace('handle_', '')
# Bind each method found, to this instance (self)
self.dispatch[name] = partial(getattr(self.mymod, lm), self)
self.settings['dispatchers'] = self.dispatch