IntelMQ

The following are sample IntelMQ configuration settings to download reports using the API.

IntelMQ v3.1 and later:

shadowserver-collector:
  description: Our bot responsible for getting reports from Shadowserver
  enabled: true
  group: Collector
  module: intelmq.bots.collectors.shadowserver.collector_reports_api
  name: Shadowserver_Collector
  parameters:
    destination_queues:
      _default: [shadowserver-parser-queue]
    file_format: csv
    api_key: "$API_KEY_received_from_the_shadowserver_foundation"
    secret: "$SECRET_received_from_the_shadowserver_foundation"
  run_mode: continuous

shadowserver-parser:
  bot_id: shadowserver-parser
  name: Shadowserver Parser
  enabled: true
  group: Parser
  groupname: parsers
  module: intelmq.bots.parsers.shadowserver.parser
  parameters:
    destination_queues:
      _default: [file-output-queue]
  run_mode: continuous