OK I have successfully created several custom feeds for things like bad IP or Bad Domain. Now I have to keep these feeds up-to-date on a regular basis. Can I just recomplied the .feed file and upload it and the CSV file to the decoders, then restart the decoder service? Are there better ways of doing this. I ultimately want to automate this process as much as possible any suggestions in this area would be appriciated. Attached are examples of the XML and the CSV.
Phil
Are you using security analytics? If so, they already have a built in method to doing this. You just need to add the feed as a recurring task and host the csv somewhere that you can give access to SA. This way you can just update the csv and it will update on its own.