fatihsirin / tweettioc-splunk-app Goto Github PK

Hello,

maybe it is possible to add some more details regarding setup and installation instructions to the readme.md.

• Ready to install in a Search Head Cluster environment? (maybe split between App and TA)
• define necessary Firewall connections (http://tweettioc.com/api*)
• how to use with Splunk Enterprise Security (dedicated job for lookup / asset creation)?

Thank you!

Hello,

it looks like the data has a delay of about one day.
Espacially for critical IoCs it would be helpful if the data get refreshed more often.

Kind regards!

Hello,

it would be great to do API searches (like searches for a dedicated url / domain / hashtag / twitter user).
In our automation we only check dedicated IoCs about external reputation.

I would suggest something like the API from URLHaus, which works really great.

Thank you!