GeoipDecomposer¶
-
class
sitchlib.geoip_decomposer.GeoipDecomposer[source]¶ GeoIP Decomposer.
-
classmethod
decompose(scan_document)[source]¶ Validate and decompose GeoIP Events.
Parameters: scan_document (dict) – GeoIP scan document. Returns: - one item in list: a two-item tuple. Position 0 is geo_ip.
- Position 1 is the actual scan document. If the scan fails validation, you’ll only get an empty list back
Return type: list
-
classmethod