INNER CODE UNIT · Python

entropy

A3sal0n/CyberThreatHunting · tools/dga-hunt.py:174

def entropy(s):
    "Calculates the Boltzmann entropy of a string"
    l = float(len(s))
    return -sum(map(lambda a: (a / l) * math.log((a / l), 2), Counter(s).values()))


def find_bad_domains(topd, domains):
    model_data = pickle.load(open('shared/gib_model.pki', 'rb'))
    model_mat = model_data['mat']
    threshold = model_data['thresh']
    suspicious = []
    for domain in domains:
        if domain not in topd:
            #resolved = False
            #try:
            #    data = socket.gethostbyname(domain)
            #    resolved = True
            #except socket.gaierror:

View source record →