feat(0013): add paste_extract enricher (preview-only)
Modo preview puro — no escribe a operations.db. Recibe texto via params.text y devuelve JSON con entidades y relaciones propuestas. Cascada: extract_iocs (regex) siempre + extract_graph_hybrid (GLiNER+GLiREL) opcional con use_hybrid=true. La aplicacion procesa el JSON y persiste con dedupe via codigo C++ (extract_panel_apply). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,14 @@
|
||||
id: paste_extract
|
||||
name: "Paste & Extract"
|
||||
description: "Extrae entidades y relaciones de texto pegado en el panel Extract. Cascada: extract_iocs (regex) + GLiNER + GLiREL si estan disponibles, fallback a solo regex. Modo preview (no escribe). El panel C++ procesa el JSON y persiste lo seleccionado via entity_ops."
|
||||
applies_to: []
|
||||
emits: [Email, IPAddress, Domain, FileHash, CryptoWallet, CVE, MACAddress, Phone, Person, Organization, Location]
|
||||
relations: []
|
||||
uses_functions:
|
||||
- extract_iocs_py_cybersecurity
|
||||
- extract_graph_hybrid_py_pipelines
|
||||
params:
|
||||
- { name: text, type: string, default: "", description: "Texto a analizar (lo pasa el panel)" }
|
||||
- { name: types, type: string, default: "", description: "CSV de tipos IoC; vacio = todos" }
|
||||
- { name: max_entities, type: int, default: 200 }
|
||||
- { name: use_hybrid, type: bool, default: "false", description: "Si true intenta cargar GLiNER/GLiREL" }
|
||||
Reference in New Issue
Block a user