ransomwarebot.py 文件源码

def _parse():
    while True:
        event = yield idiokit.next()

        for key in event.keys():
            event.pop(key, filter=lambda value: not value.strip())

        for key in ("ip", "asn", "cc"):
            event.update(key, _value_split(event.pop(key)))

        for timestamp in event.pop("first seen"):
            try:
                timestamp = time.strftime(
                    "%Y-%m-%d %H:%M:%SZ",
                    time.strptime(timestamp, "%Y-%m-%d %H:%M:%S")
                )
            except ValueError:
                pass
            else:
                event.add("first seen", timestamp)

        yield idiokit.send(event)