threatcrowd

library for working with the threatcrowd api.


License
Other
Install
pip install threatcrowd==0.4

Documentation

ThreatCrowd API


Python Library for ThreatCrowd's API

Functions

  • email_report(address) - query for the given email address

  • ip_report(address) - query for the given ip address

  • domain_report(domain) - query for the given domain

  • antivirus_report(av) - query for the given antivirus entry

Classes

  • ThreadCrowd(ttl) - Object that can perform the previous queries, but caches answers for the specificed ttl in seconds.

Example

import threatcrowd

print threatcrowd.ip_report("4.2.2.1")

tc = threatcrowd.ThreatCrowd(ttl=5) # make an object with a ttl of 5 seconds
print tc.ip_report("4.2.2.1")

# print the exact same answer because we are under the ttl
print tc.ip_report("4.2.2.1")

# expire the ttl
import time
time.sleep(6)

# this will fetch and cache a new copy
print tc.ip_report("4.2.2.1")