[socradar] Implement OpenCTI scheduler and update configuration

OpenCTI-Platform · Dec 27, 2024 · 512707a · 512707a
1 parent c73d838
commit 512707a
Show file tree

Hide file tree

Showing 3 changed files with 315 additions and 275 deletions.
diff --git a/socradar/README.md b/socradar/README.md
@@ -18,10 +18,10 @@ SOCRadar provides comprehensive threat intelligence feeds that can be used to de
 | --- | --- | --- | --- |
 | `opencti.url` | `OPENCTI_URL` | Yes | The URL of your OpenCTI platform |
 | `opencti.token` | `OPENCTI_TOKEN` | Yes | Your OpenCTI admin token |
-| `radar.base_feed_url` | `RADAR_BASE_FEED_URL` | Yes | SOCRadar API base URL |
-| `radar.socradar_key` | `RADAR_SOCRADAR_KEY` | Yes | Your SOCRadar API key |
-| `radar.interval` | `RADAR_INTERVAL` | Yes | Time between runs (in seconds, default: 600) |
-| `radar.collections_uuid` | `RADAR_COLLECTIONS_UUID` | Yes | Collection IDs to fetch |
+| `radar.radar_base_feed_url` | `RADAR_BASE_FEED_URL` | Yes | SOCRadar API base URL |
+| `radar.radar_socradar_key` | `RADAR_SOCRADAR_KEY` | Yes | Your SOCRadar API key |
+| `radar.radar_run_interval` | `RADAR_RUN_INTERVAL` | Yes | Time between runs (in seconds, default: 600) |
+| `radar.radar_collections_uuid` | `RADAR_COLLECTIONS_UUID` | Yes | Collection IDs to fetch |
 
 ### Debugging
 

diff --git a/socradar/src/config.yml.sample b/socradar/src/config.yml.sample
@@ -12,11 +12,10 @@ connector:
   update_existing_data: true
 
 radar:
-  base_feed_url: "https://platform.socradar.com/api/threat/intelligence/feed_list/"
-  format_type: ".json?key="
-  socradar_key: "SOCRADAR_KEY"
-  run_interval: 600
-  collections_uuid:
+  radar_base_feed_url: "https://platform.socradar.com/api/threat/intelligence/feed_list/"
+  radar_socradar_key: "SOCRADAR_KEY"
+  radar_run_interval: 600
+  radar_collections_uuid:
     collection_1:
       id: ["COLLECTION_UUID"]
       name: ["COLLECTION_NAME"]