check_ioc.py 文件源码

def build_cli_parser():
    parser = OptionParser(usage="%prog [options]", description="check Cb index for provided IOCs")

    # for each supported output type, add an option
    parser.add_option("-c", "--cburl", action="store", default=None, dest="url",
                      help="CB server's URL.  e.g., http://127.0.0.1 ")
    parser.add_option("-a", "--apitoken", action="store", default=None, dest="token",
                      help="API Token for Carbon Black server")
    parser.add_option("-f", "--file", action="store", default=None, dest="fname",
                      help="Filename with CRLF-delimited list of IOCs")
    parser.add_option("-t", "--type", action="store", default=None, dest="type",
                      help="Type of IOCs in the file.  Must be one of md5, domain or ipaddr")
    parser.add_option("-d", "--detail", action="store_true", default=False, dest="detail",
                      help="Get full detail about each IOC hit.")
    parser.add_option("-n", "--no-ssl-verify", action="store_false", default=True, dest="ssl_verify",
                      help="Do not verify server SSL certificate.")
    return parser