docs: def filter_webapp_attack(df, process_time):
      """
      A function that filters out the BASH SHELLSHOCK alert data obtained from FireEye
      :param df: a DataFrame object
      :param process_time:
      :return:
      """
      result = []
      track = []
      for o in df:
          if 'METHODOLOGY - WEB APP ATTACK' in o['message']:
              track.append(o)
          else:
              result.append(o)
      trackfile = open('tracking_webAppAttack_' + process_time + '.txt', 'w')
      numskip = 1
      for item in track:
          trackfile.write("\n\n**** {:d}: Display ID {} ****\n\n{}".format(numskip, item['displayId'], item))
          numskip += 1
      return result