|
1 |
| -import typing |
| 1 | +from typing import get_args, Literal |
2 | 2 |
|
3 | 3 | IP_IOC_REGEXP_PATTERN = r"(?:^|[ \/\[(\"',;>|])((?:25[0-5]|2[0-4]\d|[0-1]?\d{1,2})(?:\.(?:25[0-5]|2[0-4]\d|[0-1]?\d{1,2})){3})(?=[\s)\]\"',;:\/?\n<|]|$)" # noqa: E501
|
4 | 4 | DOMAIN_IOC_REGEXP_PATTERN = r"(?:^|[\s\/\[\]@(\"',;{>|])(?:(?:http[s]?|ftp):\/\/?)?([^:\\\/\s({\[\]@\"'`,]+\.[a-zA-Z]+)(?:(?:(?:[/|:]\w+)*\/)(?:[\w\-.]+[^#?\s]+)?(?:[\w/\-&?=%.#]+(?:\(\))?)?)?(?=[\s)\]\"',;<|]|$)" # noqa: E501
|
5 | 5 | URL_IOC_REGEXP_PATTERN = r"(?:^|[\s\/\[\]@(\"',;{>|])((?:(?:http[s]?|ftp):\/\/?)+(?:[^:\\\/\s({\[\]@\"'`,]+\.[a-zA-Z0-9]+)(?:(?:(?:[/|:]\w+)*\/)(?:[\w\-.]+[^#?\s<']+)?(?:[\w/\-&?=%.#]+(?:\(\))?)?)?)(?=[\s)\]\"',;<|]|$)" # noqa: E501
|
6 | 6 |
|
7 |
| -IOCType = typing.Literal["ip", "domain", "url", "hash"] |
8 |
| -HashType = typing.Literal["md5", "sha1", "sha256", "sha512"] |
9 |
| -IocParsingRule = typing.Literal["replace_dots", "remove_private_and_reserved_ips", "replace_hxxp"] |
| 7 | +IOCType = Literal["ip", "domain", "url", "hash"] |
| 8 | +HashType = Literal["md5", "sha1", "sha256", "sha512"] |
| 9 | +IocParsingRule = Literal["replace_dots", "remove_private_and_reserved_ips", "replace_hxxp"] |
10 | 10 |
|
11 |
| -DefaultIOCType = list(typing.get_args(IOCType)) |
12 |
| -DefaultHashType = list(typing.get_args(HashType)) |
13 |
| -DefaultIocParsingRule = list(typing.get_args(IocParsingRule)) |
| 11 | +DefaultIOCType = list(get_args(IOCType)) |
| 12 | +DefaultHashType = list(get_args(HashType)) |
| 13 | +DefaultIocParsingRule = list(get_args(IocParsingRule)) |
14 | 14 |
|
15 | 15 | HASH_MAP = {"md5": "HashMd5", "sha1": "HashSha1", "sha256": "HashSha256", "sha512": "HashSha512"}
|
16 | 16 |
|
|
0 commit comments