mirror of https://github.com/MISP/misp-modules
parent
d04bfa1220
commit
1a4a761082
|
@ -7,7 +7,7 @@
|
|||
"input": "Link of an AssemblyLine submission report.",
|
||||
"output": "MISP attributes & objects parsed from the AssemblyLine submission.",
|
||||
"references": [
|
||||
"https://www.cyber.cg.ca/en/assemblyline"
|
||||
"https://www.cyber.gc.ca/en/assemblyline"
|
||||
],
|
||||
"features": "The module requires the address of the AssemblyLine server you want to query as well as your credentials used for this instance. Credentials include the used-ID and an API key or the password associated to the user-ID.\n\nThe submission ID extracted from the submission link is then used to query AssemblyLine and get the full submission report. This report is parsed to extract file objects and the associated IPs, domains or URLs the files are connecting to.\n\nSome more data may be parsed in the future."
|
||||
}
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue