misp-modules/documentation/website/expansion/greynoise.json

15 lines
826 B
JSON
Raw Normal View History

{
2021-08-09 22:46:33 +02:00
"description": "Module to query IP and CVE information from GreyNoise",
"logo": "greynoise.png",
"requirements": [
2021-08-09 22:46:33 +02:00
"A Greynoise API key. Both Enterprise (Paid) and Community (Free) API keys are supported, however Community API users will only be able to perform IP lookups."
],
2021-08-09 22:46:33 +02:00
"input": "An IP address or CVE ID",
"output": "IP Lookup information or CVE scanning profile for past 7 days",
"references": [
"https://greynoise.io/",
"https://docs.greyniose.io/",
2021-08-09 22:46:33 +02:00
"https://www.greynoise.io/viz/account/"
],
2021-08-09 22:46:33 +02:00
"features": "This module supports: 1) Query an IP from GreyNoise to see if it is internet background noise or a common business service 2) Query a CVE from GreyNoise to see the total number of internet scanners looking for the CVE in the last 7 days."
}