diff --git a/misp_ip_analyzer.py b/misp_ip_analyzer.py index f129daf..0574c90 100644 --- a/misp_ip_analyzer.py +++ b/misp_ip_analyzer.py @@ -14,11 +14,11 @@ from timesketch.lib.analyzers import manager logger = logging.getLogger("timesketch.analyzers.misp") -class MispAnalyzer(interface.BaseAnalyzer): - """Simple, reliable MISP Analyzer for large-scale processing.""" +class MispIpAnalyzer(interface.BaseAnalyzer): # Changed from MispAnalyzer + """Enhanced MISP Analyzer for IP address analysis.""" NAME = "misp_ip_analyzer" - DISPLAY_NAME = "MISP-IP" + DISPLAY_NAME = "MISP-IP Enhanced" DESCRIPTION = "Mark events using MISP - IP address analysis using source_ip" def __init__(self, index_name, sketch_id, timeline_id=None, **kwargs):