MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity
misp-modules/documentation/website/expansion/recordedfuture.json

13 lines
1.1 KiB
JSON
Raw Normal View History

Add Recorded Future module documentation
2020-07-28 13:33:48 +02:00
{
"description": "Module to enrich attributes with threat intelligence from Recorded Future.",
chg: [documentation] Cleaner documentation directories & auto-generation Including: - A move of the previous `doc` and `docs` directories to `documentation` - `documentation` is now the default directory - The documentation previously under `doc` is now in `documentation/website` - The mkdocs previously under `docs` is now in `documentation/mkdocs` - All single JSON documentation files have been JQed - Some small improvements to list fields displaying
2020-11-17 19:36:19 +01:00
"logo": "recordedfuture.png",
"requirements": [
"A Recorded Future API token."
],
Add Recorded Future module documentation
2020-07-28 13:33:48 +02:00
"input": "A MISP attribute of one of the following types: ip, ip-src, ip-dst, domain, hostname, md5, sha1, sha256, uri, url, vulnerability, weakness.",
"output": "A MISP object containing a copy of the enriched attribute with added tags from Recorded Future and a list of new attributes related to the enriched attribute.",
chg: [documentation] Cleaner documentation directories & auto-generation Including: - A move of the previous `doc` and `docs` directories to `documentation` - `documentation` is now the default directory - The documentation previously under `doc` is now in `documentation/website` - The mkdocs previously under `docs` is now in `documentation/mkdocs` - All single JSON documentation files have been JQed - Some small improvements to list fields displaying
2020-11-17 19:36:19 +01:00
"references": [
"https://www.recordedfuture.com/"
],
Improve wording
2020-07-28 13:46:43 +02:00
"features": "Enrich an attribute to add a custom enrichment object to the event. The object contains a copy of the enriched attribute with added tags presenting risk score and triggered risk rules from Recorded Future. Malware and Threat Actors related to the enriched indicator in Recorded Future is matched against MISP's galaxy clusters and applied as galaxy tags. The custom enrichment object also includes a list of related indicators from Recorded Future (IP's, domains, hashes, URL's and vulnerabilities) added as additional attributes."
chg: [documentation] Cleaner documentation directories & auto-generation Including: - A move of the previous `doc` and `docs` directories to `documentation` - `documentation` is now the default directory - The documentation previously under `doc` is now in `documentation/website` - The mkdocs previously under `docs` is now in `documentation/mkdocs` - All single JSON documentation files have been JQed - Some small improvements to list fields displaying
2020-11-17 19:36:19 +01:00
}