Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Timestamping #1

Open
gallypette opened this issue Nov 23, 2023 · 2 comments
Open

Timestamping #1

gallypette opened this issue Nov 23, 2023 · 2 comments

Comments

@gallypette
Copy link
Member

Files generated for MISP feeds are updated, but it could be useful to keep previous PSS files to know when an attributes was first-seen in other use-cases.
We could agree in the format for timestamped filenames ie. private-search-set:20231123.bloom
@adulau
Copy link
Member

adulau commented Nov 23, 2023

That's a good idea.

@be-a-panther
Copy link

I suggest an optional field in the json which contains a list. Each time data is appended a tuple is added (count of added elements, hash over added elements, timestamp)
This entry could also be added into the full PSS as comment.
The information when an attribute was first-seen is not something that should be done over multiple copies of bloom filter files.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@adulau @gallypette @be-a-panther