Feeds page: add IntelOwl analysis link for each IOC. Closes #292#865
Feeds page: add IntelOwl analysis link for each IOC. Closes #292#865mlodic merged 6 commits intoGreedyBear-Project:developfrom
Conversation
|
@regulartim can you please review |
regulartim
left a comment
There was a problem hiding this comment.
Looks good, all in all. Can you add at least one test case that checks if the column appears when INTELOWL_URL is set and is absent when not?
| Cell: ({ row }) => ( | ||
| <div className="d-flex justify-content-center"> | ||
| <a | ||
| href={`${INTELOWL_URL}/scan?observable_name=${row.original.value}`} |
There was a problem hiding this comment.
Please use URL encoding for row.original.value.
|
|
@regulartim passed all checks and made all the changes. |
regulartim
left a comment
There was a problem hiding this comment.
Looks good to me! 👍
@mlodic , could you take a look? If this is what you wanted, please merge and close the issue.
| title={`Analyze ${row.original.value} on IntelOwl`} | ||
| > | ||
| <img | ||
| src={`${PUBLIC_URL}/intelowl.png`} |
There was a problem hiding this comment.
I would use the owl icon instead of the big "IntelOwl" image. It is smaller and fits better the page.
Aside from that, it is good change, thanks.
Please provide new screenshot after such change
@mlodic This is how it looks like, after changing the image
|
…r-Project#292 (GreedyBear-Project#865) * added intelowl column * url encoding * 3 new testcases * fix: prettier formatting in TableColumns.test.jsx * new image * new
Description
Adds an optional "Analyze" column to the Feeds table. When the new
VITE_INTELOWL_URLenvironment variable is set, each row displays the IntelOwl icon. Clicking it opens the IntelOwl scan page in a new tab with the IOC value pre-filled in the observable field.VITE_INTELOWL_URLis a Vite build-time variable (theVITE_prefix is required by Vite), so it is baked into the frontend bundle atdocker compose buildtime. Set it indocker/env_file_templatebefore building:The generated link format is:
The feature is fully opt-in — if
VITE_INTELOWL_URLis empty or unset, the column is not rendered and existing deployments are unaffected.Files changed
docker/env_file_templateVITE_INTELOWL_URLwith inline documentationfrontend/src/constants/environment.jsINTELOWL_URLconstant (supports both Vite and test environments)frontend/src/components/feeds/tableColumns.jsxINTELOWL_URLfrontend/public/intelowl.pngRelated issues
Closes #292
Type of change
Checklist
develop.Ruff) gave 0 errors. If you have correctly installed pre-commit, it does these checks and adjustments on your behalf.