Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cortex Censys Analyzer failed to authenticate #443

Open
chickenit07 opened this issue Mar 8, 2023 · 0 comments
Open

Cortex Censys Analyzer failed to authenticate #443

chickenit07 opened this issue Mar 8, 2023 · 0 comments

Comments

@chickenit07
Copy link

Cortex Censys Analyzer failed to authenticate

Work Environment

Question Answer
OS version (server) Ubuntu 20.04.4 LTS (Focal Fossa)
OS version (client) Windows 11 ...
Cortex version / git hash 3.1.7-1
Package Type From source

Problem Description

I try to authenticate with Censys analyzer but it shows that I don't provide a proper credentials.
I did provide a proper credential which is both uid and secret_key collected from Censys-My Account but when I run analyzer within Thehive, it shows:

{
"errorMessage": "Censys raised NotAuthorizedException. Please check your credentials.",
"success": false
}

I did change the version of Censys to 2.x.x and the credential is working well but it shows another error:

"Traceback (most recent call last): File "/opt/Cortex-Analyzers/analyzers/Censys/censys_analyzer.py", line 5, in from censys.ipv4 import CensysIPv4ModuleNotFoundError: No module named 'censys.ipv4''"

I think the problem is that censys.ipv4 is deprecate so we need to make some changes on the analyzer code.
What I do to

Steps to Reproduce

  1. Enable Cencys analyzer on Cortex with uid-key corresponding to Censys Account
  2. Go to Thehive and create an Observable
  3. Fill out the requirement field with Type is IP and choose Create observable.
  4. Choose the Observable and run analyzer Censys.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant