valitydev/Cortex-Analyzers
14
0
Fork 0
mirror of https://github.com/valitydev/Cortex-Analyzers.git synced 2024-11-07 17:38:53 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

better wording and typos

Browse Source
This commit is contained in:
Saad Kadhi 2017-05-12 10:13:59 +02:00
parent 86277a1812
commit 3df9277f45
20 changed files with 20 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
analyzers/Abuse_Finder/Abuse_Finder.json
View File

@ -10,7 +10,7 @@
"max_tlp":3,
"service":""
},
"description": "Use CERT-SG's Abuse Finder to find the abuse contact associated with domain names, URLs, IP and email addresses.",
"description": "Use CERT-SG's Abuse Finder to find the abuse contact associated with domain names, URLs, IPs and email addresses",
"dataTypeList": ["ip", "domain", "url","email"],
"command": "Abuse_Finder/abusefinder.py"
}

2
analyzers/DomainTools/DomainTools_ReverseIP.json
View File

@ -10,7 +10,7 @@
"max_tlp": 1,
"service": "reverse-ip"
},
"description": "DomainTools Reverse IP: provides a list of domain names that share the same Internet host",
"description": "Use DomainTools Reverse IP service to provide a list of domain names sharing the same IP address",
"dataTypeList": ["ip"],
"command": "DomainTools/domaintools.py"
}

2
analyzers/DomainTools/DomainTools_ReverseNameServer.json
View File

@ -10,7 +10,7 @@
"max_tlp": 1,
"service": "name-server-domains"
},
"description": "DomainTools Reverse Name server: provides a list of domain names that share the same primary or secondary name server",
"description": "Use DomainTools Reverse Name Server service to get a list of domain names that share the same primary or secondary name server",
"dataTypeList": ["domain"],
"command": "DomainTools/domaintools.py"
}

2
analyzers/DomainTools/DomainTools_ReverseWhois.json
View File

@ -10,7 +10,7 @@
"max_tlp": 1,
"service": "reverse-whois"
},
"description": "Domaintools Reverse Whois lookup : provides a list of domain names that share the same Registrant Information.",
"description": "Get a list of domain names which share the same registrant information through Domaintools Reverse Whois service",
"dataTypeList": ["mail", "ip", "domain", "other"],
"command": "DomainTools/domaintools.py"
}

2
analyzers/DomainTools/DomainTools_WhoisHistory.json
View File

@ -10,7 +10,7 @@
"max_tlp": 1,
"service": "whois/history"
},
"description": "DomainTools Whois History: provides a list of historic Whois records for a domain name",
"description": "Get a list of historic Whois records associated with a domain name through DomainTools Whois History service",
"dataTypeList": ["domain"],
"command": "DomainTools/domaintools.py"
}

2
analyzers/DomainTools/DomainTools_WhoisLookup.json
View File

@ -10,7 +10,7 @@
"max_tlp": 1,
"service": "whois/parsed"
},
"description": "DomainTools Whois Lookup: provides the ownership record for a domain name with basic registration details",
"description": "Get the ownership record for a domain with basic registration details using DomainTools Whois Lookup service",
"dataTypeList": ["domain"],
"command": "DomainTools/domaintools.py"
}

2
analyzers/DomainTools/DomainTools_WhoisLookupIP.json
View File

@ -10,7 +10,7 @@
"max_tlp": 1,
"service": "whois"
},
"description": "DomainTools Whois Lookup IP: provides the ownership record for a IP address with basic registration details",
"description": "Get the ownership record for an IP address with basic registration details using DomainTools Whois Lookup IP service",
"dataTypeList": ["ip"],
"command": "DomainTools/domaintools.py"
}

2
analyzers/File_Info/File_Info.json
View File

@ -10,7 +10,7 @@
"max_tlp": 3,
"service": ""
},
"description": "Parse files in several formats such as OLE and OpenXML to detect VBA macros, extract their source code, generate useful information on PE, PDF files and much more.",
"description": "Parse files in several formats such as OLE and OpenXML to detect VBA macros, extract their source code, generate useful information on PE, PDF files and much more",
"dataTypeList": [
"file"
],

2
analyzers/Fortiguard/Fortiguard_URLCategory.json
View File

@ -5,7 +5,7 @@
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
"license": "AGPL-V3",
"dataTypeList": ["domain", "url"],
"description": "URL Category by Fortiguard: checks the category of a specific URL or domain",
"description": "Check the Fortiguard category of a URL or a domain",
"baseConfig": "Fortiguard",
"config": {
"check_tlp": true,

2
analyzers/Hippocampe/Hippocampe_hipposcore.json
View File

@ -4,7 +4,7 @@
"author": "CERT-BDF",
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
"license": "AGPL-V3",
"description": "Hippocampe Score report: provides the last report for an IP, domain or a URL",
"description": "Get the Hippocampe Score report associated with an IP address, a domain or a URL",
"dataTypeList": ["ip", "domain", "fqdn", "url"],
"baseConfig": "Hippocampe",
"config": {

2
analyzers/Hippocampe/Hippocampe_more.json
View File

@ -4,7 +4,7 @@
"author": "CERT-BDF",
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
"license": "AGPL-V3",
"description": "Hippocampe detailed report: provides the last detailed report for an IP, domain or a URL",
"description": "Get the Hippocampe detailed report for an IP address, a domain or a URL",
"dataTypeList": ["ip", "domain", "fqdn", "url"],
"baseConfig": "Hippocampe",
"config": {

2
analyzers/JoeSandbox/JoeSandbox_Url_Analysis.json
View File

@ -9,7 +9,7 @@
"check_tlp": false,
"service": "url_analysis"
},
"description": "Joe Sandbox url analysis",
"description": "Joe Sandbox URL analysis",
"dataTypeList": ["url"],
"command": "JoeSandbox/joesandbox_analyzer.py"
}

2
analyzers/MISP/MISP_Search.json
View File

@ -9,7 +9,7 @@
"check_tlp": false,
"service": "search"
},
"description": "Search MISP event that have the observable provided as an input",
"description": "Search MISP events that have the observable provided as input",
"dataTypeList": ["domain", "filename", "fqdn", "hash", "ip", "mail", "mail_subject", "other", "regexp", "registry", "uri_path", "url", "user-agent"],
"command": "MISP/misp_analyzer.py"
}

2
analyzers/MaxMind/MaxMind_GeoIP.json
View File

@ -10,7 +10,7 @@
"max_tlp": 3,
"service": ""
},
"description": "MaxMind: Geolocation",
"description": "Geolocate an IP Address via MaxMind",
"dataTypeList": ["ip"],
"command": "MaxMind/geo.py"
}

2
analyzers/MsgParser/Msg_Parser.json
View File

@ -10,7 +10,7 @@
"max_tlp": 3,
"service": ""
},
"description": "Outlook .msg file parser",
"description": "Parse Outlook MSG files and extract the main artifacts",
"dataTypeList": [
"file"
],

2
analyzers/OTXQuery/OTXQuery.json
View File

@ -4,7 +4,7 @@
"author": "Eric Capuano",
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
"license": "AGPL-V3",
"description": "Query AlienVault OTX for IPs, Domains, URLs, or File Hashes",
"description": "Query AlienVault OTX for IPs, domains, URLs, or file hashes",
"dataTypeList": ["url", "domain", "file", "hash", "ip"],
"baseConfig": "OTXQuery",
"config": {

2
analyzers/PhishTank/PhishTank_CheckURL.json
View File

@ -4,7 +4,7 @@
"author": "Eric Capuano",
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
"license": "AGPL-V3",
"description": "Check URL against PhishTank to determine if it's a verified phishing site",
"description": "Check a URL against PhishTank to determine if it's a verified phishing site",
"dataTypeList": ["url"],
"baseConfig": "PhishTank",
"config": {

2
analyzers/PhishingInitiative/PhishingInitiative_Lookup.json
View File

@ -4,7 +4,7 @@
"author": "CERT-BDF",
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
"license": "AGPL-V3",
"description": "Check URL against Phishing Initiative to determine if it's a verified phishing site",
"description": "Check a URL against Phishing Initiative to determine if it's a verified phishing site",
"dataTypeList": ["url"],
"baseConfig": "PhishingInitiative",
"config": {

2
analyzers/VirusTotal/VirusTotal_GetReport.json
View File

@ -4,7 +4,7 @@
"author": "CERT-BDF",
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
"license": "AGPL-V3",
"description": "VirusTotal get report: provides the last report of a file, hash, domain or ip",
"description": "Get the latest VirusTotal report for a file, hash, domain or an IP address",
"dataTypeList": ["file", "hash", "domain", "ip"],
"baseConfig": "VirusTotal",
"config": {

2
analyzers/VirusTotal/VirusTotal_Scan.json
View File

@ -4,7 +4,7 @@
"author": "CERT-BDF",
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
"license": "AGPL-V3",
"description": "VirusTotal scan file or url",
"description": "Scan a file or URL using VirusTotal",
"dataTypeList": ["file", "url"],
"baseConfig": "VirusTotal",
"config": {