Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Separate databases - CouchDB breaking changes #49

Open
cloudtracer opened this issue Sep 19, 2017 · 1 comment
Open

Separate databases - CouchDB breaking changes #49

cloudtracer opened this issue Sep 19, 2017 · 1 comment

Comments

@cloudtracer
Copy link
Owner

This will be a breaking change for anyone using the CouchDB integration.

Currently there are two (local in browser) pouchdb databases for ThreatPinch:

tpconfig - which stores all the ThreatPinch configuration settings and lookup settings
threatpinch - which stores all the API responses and ThreatPinch enrichments as a single JSON doc.

Currently the proposed changes will be to do the following:

tpconfig - Continue to store all settings.
threatpinch - Store the high level ThreatPinch breakdowns (basically whats available in the popover and captured enrichments).
tphistory - Store indicator and date of lookup
tppivots - Store indicator to related indicator mappings in a more sophisticated manner (TBD)

Each "Request Lookup" will then also have its own database to store unmodified API responses.

eg. 'VIRUSTOTALPRIVATEMD5', 'VIRUSTOTALPRIVATESHA1', 'VIRUSTOTALPRIVATESHA2', 'VIRUSTOTALEFQDN' would all have separate DB's to save similarly formatted API responses in the same database.

This should make re-using the API responses less difficult for future integrations since tools that already parse these responses for data should be able to make use of them without modification.

@cloudtracer
Copy link
Owner Author

If anyone is using the CouchDB integration please feel free to chime in on any enhancements in this area as it isn't widely used.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant