|
1 | | -fromtypingimportget_args,Literal |
| 1 | +fromtypingimportLiteral,get_args |
2 | 2 |
|
3 | 3 | IP_IOC_REGEXP_PATTERN=r"(?:^|[ \/\[(\"',;>|])((?:25[0-5]|2[0-4]\d|[0-1]?\d{1,2})(?:\[?\(?\{?\.\]?\)?\}?(?:25[0-5]|2[0-4]\d|[0-1]?\d{1,2})){3})(?=[\s)\]\"',;:\/?\n<|]|$)"# noqa: E501 |
4 | | -DOMAIN_IOC_REGEXP_PATTERN=r"(?:^|[\s\/\[\]@(\"',;{>|])(?:(?:http[s]?|ftp):\/\/?)?([^:\\\/\s({\[\]@\"'`,]+\.[a-zA-Z]+)(?:(?:(?:[/|:]\w+)*\/)(?:[\w\-.]+[^#?\s]+)?(?:[\w/\-&?=%.#]+(?:\(\))?)?)?(?=[\s)\]\"',;<|]|$)"# noqa: E501 |
5 | | -URL_IOC_REGEXP_PATTERN=r"(?:h[xX][xX]p[s]?|f[txX]p[s]?):\/\/[^\s,:;]+"# noqa: E501 |
| 4 | +DOMAIN_IOC_REGEXP_PATTERN=r"((?:[A-Za-z0-9|-]+\[?\{?\(?\.\)?\}?\]?)*[A-Za-z0-9|-]+(?:\[|\{|\()\.(?:\)|\}|\])[A-Za-z|-]+)|((?:[A-Za-z0-9|-]+(?:\[|\{|\()\.(?:\)|\}|\]))*[A-Za-z0-9|-]+(?:\[|\{|\()\.(?:\)|\}|\])[A-Za-z|-]+)|(?:h[xX][xX]p[s]?|f[txX]p[s]?):\/\/([^\/\s,:;]+)+"# noqa: E501 |
| 5 | +URL_IOC_REGEXP_PATTERN=r"(?:h[xX][xX]p[s]?|f[txX]p[s]?):\/\/[^\s,:;]+" |
6 | 6 |
|
7 | 7 | IOCType=Literal["ip","domain","url","hash"] |
8 | 8 | HashType=Literal["md5","sha1","sha256","sha512"] |
9 | 9 | IocParsingRule=Literal["replace_dots","remove_private_and_reserved_ips","replace_hxxp"] |
10 | 10 |
|
11 | | -DefaultIOCType=list(get_args(Literal["ip","url","hash"])) |
| 11 | +DefaultIOCType=list(get_args(IOCType)) |
12 | 12 | DefaultHashType=list(get_args(HashType)) |
13 | 13 | DefaultIocParsingRule=list(get_args(IocParsingRule)) |
14 | 14 |
|
|