alienvault.py•1.59 kB
import requests
from string import Template
from urllib.parse import urljoin
import jinja2
from services.base import BaseService
class AlienVault(BaseService):
name: str = "alienvault"
host: str = "https://otx.alienvault.com/api/v1/"
class AlienVaultIP(AlienVault):
endpoint: Template = Template("indicators/IPv4/$ipaddress/general")
def get(self, ipaddress: str) -> requests.PreparedRequest:
return requests.Request(
method=self.method,
url=urljoin(self.host, self.endpoint.substitute(ipaddress=ipaddress)),
headers=self.headers,
).prepare()
def parse_response(self, response: requests.Response, template: jinja2.Template) -> str:
if response and response.ok and response.json():
return template.render(
name=self.name,
**response.json()
)
else:
return ""
class AlienVaultDomain(AlienVault):
endpoint: Template = Template("indicators/domain/$domain/general")
def get(self, domain: str) -> requests.PreparedRequest:
return requests.Request(
method=self.method,
url=urljoin(self.host, self.endpoint.substitute(domain=domain)),
headers=self.headers,
).prepare()
def parse_response(self, response: requests.Response, template: jinja2.Template) -> str:
if response and response.ok and response.json():
return template.render(
name=self.name,
**response.json()
)
else:
return ""