Company
Date Published
Author
Thomas Kinsella
Word count
465
Language
English
Hacker News points
None

Summary

Tines addresses the challenge of analyzing .eml files, which contain the raw contents of emails reported as suspicious through phish reporting tools, by developing a liquid filter called eml_parse. This tool extracts and structures data from .eml files, including sender, body, attachments, and headers, allowing for comprehensive analysis similar to that of emails sent to abuse inboxes. The process involves decoding the base64 encoded contents of an .eml attachment using the eml_parse and as_object liquid filters, enabling recursive analysis of .eml attachments within emails. This method simplifies the automation of phishing analysis, making it easy to incorporate into existing workflows and utilize various analysis tools.