mirror of
https://github.com/valitydev/Cortex-Analyzers.git
synced 2024-11-07 17:38:53 +00:00
#32 Add metadata attributes to analyzer description files
This commit is contained in:
parent
7df7796428
commit
814d561fe5
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "Abuse_Finder",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "Abuse_Finder",
|
||||
"config": {
|
||||
"check_tlp": false,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "DNSDB_DomainName",
|
||||
"version": "1.1",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "DNSDB",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "DNSDB_IPHistory",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "DNSDB",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "DNSDB_NameHistory",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "DNSDB",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "DomainTools_ReverseIP",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "DomainTools",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "DomainTools_ReverseNameServer",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "DomainTools",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "DomainTools_ReverseWhois",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "DomainTools",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "DomainTools_WhoisHistory",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "DomainTools",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "DomainTools_WhoisLookup",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "DomainTools",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "DomainTools_WhoisLookup_IP",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "DomainTools",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "File_Info",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"config": {
|
||||
"check_tlp": false,
|
||||
"max_tlp": 3,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "Fortiguard_URLCategory",
|
||||
"version": "1.0",
|
||||
"author": "Eric Capuano",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"dataTypeList": ["domain", "url"],
|
||||
"description": "URL Category by Fortiguard: checks the category of a specific URL or domain",
|
||||
"baseConfig": "Fortiguard",
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "Hipposcore",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"description": "Hippocampe Score report: provides the last report for an IP, domain or a URL",
|
||||
"dataTypeList": ["ip", "domain", "fqdn", "url"],
|
||||
"baseConfig": "Hippocampe",
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "HippoMore",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"description": "Hippocampe detailed report: provides the last detailed report for an IP, domain or a URL",
|
||||
"dataTypeList": ["ip", "domain", "fqdn", "url"],
|
||||
"baseConfig": "Hippocampe",
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "JoeSandbox_File_Analysis_Inet",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "JoeSandbox",
|
||||
"config": {
|
||||
"check_tlp": false,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "JoeSandbox_File_Analysis_Noinet",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "JoeSandbox",
|
||||
"config": {
|
||||
"check_tlp": false,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "JoeSandbox_Url_Analysis",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "JoeSandbox",
|
||||
"config": {
|
||||
"check_tlp": false,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "MISP_Search",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "MISP",
|
||||
"config": {
|
||||
"check_tlp": false,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "MaxMind_GeoIP",
|
||||
"version": "2.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"config": {
|
||||
"check_tlp": false,
|
||||
"max_tlp": 3,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "Msg_Parser",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"config": {
|
||||
"check_tlp": false,
|
||||
"max_tlp": 3,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "Nessus",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "Nessus",
|
||||
"config": {
|
||||
"check_tlp": false
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "OTXQuery",
|
||||
"version": "1.0",
|
||||
"author": "Eric Capuano",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"description": "Query AlienVault OTX for IPs, Domains, URLs, or File Hashes",
|
||||
"dataTypeList": ["url", "domain", "file", "hash", "ip"],
|
||||
"baseConfig": "OTXQuery",
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PassiveTotal_Enrichment",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "PassiveTotal",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PassiveTotal_Malware",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "PassiveTotal",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PassiveTotal_Osint",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "PassiveTotal",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PassiveTotal_Passive_Dns",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "PassiveTotal",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PassiveTotal_Ssl_Certificate_Details",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "PassiveTotal",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PassiveTotal_Ssl_Certificate_History",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "PassiveTotal",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PassiveTotal_Unique_Resolutions",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "PassiveTotal",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PassiveTotal_Whois_Details",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"baseConfig": "PassiveTotal",
|
||||
"config": {
|
||||
"check_tlp": true,
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PhishTank_CheckURL",
|
||||
"version": "1.0",
|
||||
"author": "Eric Capuano",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"description": "Check URL against PhishTank to determine if it's a verified phishing site",
|
||||
"dataTypeList": ["url"],
|
||||
"baseConfig": "PhishTank",
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "PhishingInitiative_Lookup",
|
||||
"version": "1.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"description": "Check URL against Phishing Initiative to determine if it's a verified phishing site",
|
||||
"dataTypeList": ["url"],
|
||||
"baseConfig": "PhishingInitiative",
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "VirusTotal_GetReport",
|
||||
"version": "2.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"description": "VirusTotal get report: provides the last report of a file, hash, domain or ip",
|
||||
"dataTypeList": ["file", "hash", "domain", "ip"],
|
||||
"baseConfig": "VirusTotal",
|
||||
|
@ -1,6 +1,9 @@
|
||||
{
|
||||
"name": "VirusTotal_Scan",
|
||||
"version": "2.0",
|
||||
"author": "CERT-BDF",
|
||||
"url": "https://github.com/CERT-BDF/Cortex-Analyzers",
|
||||
"license": "AGPL-V3",
|
||||
"description": "VirusTotal scan file or url",
|
||||
"dataTypeList": ["file", "url"],
|
||||
"baseConfig": "VirusTotal",
|
||||
|
Loading…
Reference in New Issue
Block a user