Observable Extractor improvement

[jeffrey-e]

This PR contains support for full text regex parsing in order to find basic observables throughout multiline text bodies.

Current support:

• ip
• mail (sub matches: domain)
• url (sub matches: domain, fqdn, uri_path)

This PR is related to: TheHive-Project/Cortex-Analyzers#399

[kx499-zz]

This is awesome! I was actually looking to do the same thing for a spam email workflow. My take on it is that you don't want to always so a full text regex on all fields. I was thinking if you could make it an option on check_iterable and check_string. Something like an addotional param on those functions like ft=False. So it doesn't break existing stuff and you call it either on the entire analyzer output or just a field like body or something. Just my thoughts

[nadouani]

@gekkeharry13 Sorry for the delay, this will be merged into the new cortexutils 2.0.0 version that was under construction for Cortex 3.0.0 release.

[iwitz]

There is an error at line 179 :
self.regexpack = self.ftregex + self.asregex
should be
self.regexpack = self.ftregex
Since self.asregex is not defined.

[jeffrey-e]

Patched the error @iwitz and @nadouani

[nadouani]

This PR is a bit outdated, and needs to resolve conflicts.