valitydev/Cortex-Analyzers
14
0
Fork 0
mirror of https://github.com/valitydev/Cortex-Analyzers.git synced 2024-11-06 00:55:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix info in json, keep analyzer simple

Browse Source
This commit is contained in:
dadokkio 2021-02-23 10:34:51 +01:00
parent 05d69aa92b
commit 0789ca2290
3 changed files with 49 additions and 67 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
analyzers/DNSLookingglass/DNSLookingglass.json
View File

@ -9,6 +9,24 @@
"command": "DNSLookingglass/DNSLookingglass_lookup.py",
"baseConfig": "DNSLookingglass.json",
"config": {
"service": "query"
}
}
"service": "query"
},
"registration_required": false,
"subscription_required": false,
"free_subscription": false,
"service_homepage": "https://isc.sans.edu/",
"service_logo": {
"path": "assets/dshield.png",
"caption": "logo"
},
"screenshots": [
{
"path": "assets/DNS_Lookingglass_long.png",
"caption": "DNS Lookingglass: Long report template"
},
{
"path": "assets/DNS_Lookingglass_artifacts.png",
"caption": "DNS Lookingglass: artifacts"
}
]
}

BIN
analyzers/DNSLookingglass/assets/dshield.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 70 KiB

92
thehive-templates/DNS_Lookingglass_1_0/long.html
View File

@ -1,68 +1,32 @@
<div class="report-DNS_Lookingglass" ng-if="success">
<style>
.report-DNS_Lookingglass dl {
margin-bottom: 2px;
}
.backgroundTable tr:nth-child(even) {background-color: #f2f2f2;}
.backgroundTableodd tr:nth-child(odd) {background-color: #f2f2f2;}
.backgroundTable th, .backgroundTableodd th {
background: white;
position: sticky;
top: -2px;
box-shadow: 0 2px 2px -1px rgba(0, 0, 0, 0.4);
}
.timelineTable th {
background: white;
position: sticky;
top: -15px;
box-shadow: 0 2px 2px -1px rgba(0, 0, 0, 0.4);
text-align: center;
}
.timelineTable tbody tr:hover td, .backgroundTable tbody tr:hover td, .backgroundTableodd tbody tr:hover td {
background-color: #d9edf7;
}
.timelineTable td {
max-width:200px;
}
.timelineTable tr {
max-height:100px;
}
</style>
<div class="panel panel-info">
<div class="panel panel-info" ng-if="content.results">
<div class="panel-heading">
<strong>Results</strong> (from {{content.count}} locations)
</div>
<div class="panel-body" style="display:block;height:750px;overflow:auto;">
<table class="table table-hover backgroundTable timelineTable">
<thead>
<th>Lookup from country</th>
<th>Lookup status</th>
<th>Lookup answer</th>
</thead>
<tbody>
<tr ng-repeat="hit in content.results track by $index">
<td>
{{hit.country.toString()}}
</td>
<td style="overflow:auto">
{{hit.status.toString()}}
</td>
<td style="overflow:auto">
{{hit.answer.toString()}}
</td>
</tr>
</tbody>
</table>
</div>
<div class="panel panel-info" ng-if="success">
<div class="panel panel-info" ng-if="content.results">
<div class="panel-heading">
<strong>Results</strong> (from {{content.count}} locations)
</div>
<div class="panel-body" style="display:block;height:750px;overflow:auto;">
<table class="table table-hover table-striped">
<thead>
<th>Lookup from country</th>
<th>Lookup status</th>
<th>Lookup answer</th>
</thead>
<tbody>
<tr ng-repeat="hit in content.results track by $index">
<td>
{{hit.country.toString()}}
</td>
<td style="overflow:auto">
{{hit.status.toString()}}
</td>
<td style="overflow:auto">
{{hit.answer.toString()}}
</td>
</tr>
</tbody>
</table>
</div>
<br/>
<hr>
<br/>
</div>
</div>
<!-- General error -->
<div class="panel panel-danger" ng-if="!success">
@ -72,4 +36,4 @@
<div class="panel-body">
{{content.errorMessage}}
</div>
</div>
</div>