{"action":"created","issue":{"url":"https://api.github.com/repos/certtools/intelmq/issues/201","labels_url":"https://api.github.com/repos/certtools/intelmq/issues/201/labels{/name}","comments_url":"https://api.github.com/repos/certtools/intelmq/issues/201/comments","events_url":"https://api.github.com/repos/certtools/intelmq/issues/201/events","html_url":"https://github.com/certtools/intelmq/pull/201","id":84046067,"number":201,"title":"Parser Bot - Microsoft DCU","user":{"login":"Phantasus","id":1078087,"avatar_url":"https://avatars.githubusercontent.com/u/1078087?v=3","gravatar_id":"","url":"https://api.github.com/users/Phantasus","html_url":"https://github.com/Phantasus","followers_url":"https://api.github.com/users/Phantasus/followers","following_url":"https://api.github.com/users/Phantasus/following{/other_user}","gists_url":"https://api.github.com/users/Phantasus/gists{/gist_id}","starred_url":"https://api.github.com/users/Phantasus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Phantasus/subscriptions","organizations_url":"https://api.github.com/users/Phantasus/orgs","repos_url":"https://api.github.com/users/Phantasus/repos","events_url":"https://api.github.com/users/Phantasus/events{/privacy}","received_events_url":"https://api.github.com/users/Phantasus/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-06-02T14:22:19Z","updated_at":"2015-06-03T14:12:15Z","closed_at":"2015-06-03T14:12:15Z","pull_request":{"url":"https://api.github.com/repos/certtools/intelmq/pulls/201","html_url":"https://github.com/certtools/intelmq/pull/201","diff_url":"https://github.com/certtools/intelmq/pull/201.diff","patch_url":"https://github.com/certtools/intelmq/pull/201.patch"},"body":"This adds code for the DCU parser, which parses output of the\r\ndcu-collector and converts it into IntelMQ internal format.\r\n\r\nSome fields to which no reasonable mapping was found or which\r\ncontained not yet useable information, were simply ignored.\r\n\r\nIt also breaks the ontology of having a lowercase \"malware\" field.\r\nWhy did I do that? Because the dcu format contains a threat code,\r\nwhich is mixed case, to include that information I just assigned it.\r\n\r\nSo let me know if we should just convert that thing to lowercase\r\nor throw it completly away."},"comment":{"url":"https://api.github.com/repos/certtools/intelmq/issues/comments/108443848","html_url":"https://github.com/certtools/intelmq/pull/201#issuecomment-108443848","issue_url":"https://api.github.com/repos/certtools/intelmq/issues/201","id":108443848,"user":{"login":"aaronkaplan","id":750019,"avatar_url":"https://avatars.githubusercontent.com/u/750019?v=3","gravatar_id":"","url":"https://api.github.com/users/aaronkaplan","html_url":"https://github.com/aaronkaplan","followers_url":"https://api.github.com/users/aaronkaplan/followers","following_url":"https://api.github.com/users/aaronkaplan/following{/other_user}","gists_url":"https://api.github.com/users/aaronkaplan/gists{/gist_id}","starred_url":"https://api.github.com/users/aaronkaplan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aaronkaplan/subscriptions","organizations_url":"https://api.github.com/users/aaronkaplan/orgs","repos_url":"https://api.github.com/users/aaronkaplan/repos","events_url":"https://api.github.com/users/aaronkaplan/events{/privacy}","received_events_url":"https://api.github.com/users/aaronkaplan/received_events","type":"User","site_admin":false},"created_at":"2015-06-03T14:12:15Z","updated_at":"2015-06-03T14:12:15Z","body":"we tested and reported the testing results in #184 . Closing this for now, please send another PR.\r\nThanks, much appreciated.\r\n"}}