eris

- Elasticsearch Recon Ingestion Scripts (ERIS) 🔎

git clone git://git.acid.vegas/-c.git

commit e74741c0ade0f6057dca134f662d48cb206105e9
parent 6983b8ebecdb114eff28ad737b3af60d23ad5eb2
Author: acidvegas <acid.vegas@acid.vegas>
Date: Sat, 23 Mar 2024 14:46:44 -0400

Updated example record comment under source to reflect on the new record structure

Diffstat:

ingestors/ingest_zone.py

++++-

1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/ingestors/ingest_zone.py b/ingestors/ingest_zone.py
@@ -82,8 +82,9 @@ async def process_data(file_path: str):
 			if not line:
 				continue
 
+			# Skip comments but detect AXFR transfers to change the source)
 			if line.startswith(';'):
-				if 'DiG' in line and 'AXFR' in line: # Zone transfer from an AXFR request
+				if 'DiG' in line and 'AXFR' in line:
 					source = 'axfr'
 				continue
 				
@@ -185,12 +186,14 @@ Input:
 		'_index'  : 'dns-zones',
 		'_source' : {
 			'domain'  : '1001.vegas',
+			'zone'    : 'vegas',
 			'records' : {
 				'ns': [
 					{'ttl': 3600, 'data': 'ns11.waterrockdigital.com'},
 					{'ttl': 3600, 'data': 'ns12.waterrockdigital.com'}
 				]
 			},
+			'source'  : 'czds',
 			'seen'    : '2021-09-01T00:00:00Z'
 		}
 	}