You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Even when the PT SSL History Analyzer has no data for a hashsum , it will return: "PT:SSLCertHistory="1 record(s)" in the info box.
This is because the analyzer returns an array with one entry, even if there is no data.
This is irritating, because you will see for every hash sum that there is a PT:SSL record, even if there isn't one.
Request Type
Bug
Work Environment
Cortex Version: 3.0.0-RC3
Analyzer PassiveTotal_Ssl_Certificate_History_2_0
Problem Description
Even when the PT SSL History Analyzer has no data for a hashsum , it will return: "PT:SSLCertHistory="1 record(s)" in the info box.
This is because the analyzer returns an array with one entry, even if there is no data.
This is irritating, because you will see for every hash sum that there is a PT:SSL record, even if there isn't one.
Raw data looks like:
{
"results": [
{
"firstSeen": "N/A",
"sha1": "SHA1SUM",
"lastSeen": "N/A",
"ipAddresses": "N/A"
}
],
"success": true
}
Possible Solutions
Analyzer should test if the return value from PT is just N/A and then return an empty array.
The text was updated successfully, but these errors were encountered: