mirror of https://github.com/MISP/misp-modules
chg: [doc] Updated the farsight_passivedns module documentation
parent
294ac9d01e
commit
4119e094aa
|
@ -505,13 +505,18 @@ A module to query the Phishing Initiative service (https://phishing-initiative.l
|
|||
|
||||
Module to access Farsight DNSDB Passive DNS.
|
||||
- **features**:
|
||||
>This module takes a domain, hostname or IP address MISP attribute as input to query the Farsight Passive DNS API. The API returns then the result of the query with some information about the value queried.
|
||||
>This module takes a domain, hostname or IP address MISP attribute as input to query the Farsight Passive DNS API.
|
||||
> The results of rdata and rrset lookups are then returned and parsed into passive-dns objects.
|
||||
>
|
||||
>An API key is required to submit queries to the API.
|
||||
> It is also possible to define a custom server URL, and to set a limit of results to get.
|
||||
> This limit is set for each lookup, which means we can have an up to the limit number of passive-dns objects resulting from an rdata query about an IP address, but an up to the limit number of passive-dns objects for each lookup queries about a domain or a hostname (== twice the limit).
|
||||
- **input**:
|
||||
>A domain, hostname or IP address MISP attribute.
|
||||
- **output**:
|
||||
>Text containing information about the input, resulting from the query on the Farsight Passive DNS API.
|
||||
>Passive-dns objects, resulting from the query on the Farsight Passive DNS API.
|
||||
- **references**:
|
||||
>https://www.farsightsecurity.com/
|
||||
>https://www.farsightsecurity.com/, https://docs.dnsdb.info/dnsdb-api/
|
||||
- **requirements**:
|
||||
>An access to the Farsight Passive DNS API (apikey)
|
||||
|
||||
|
|
|
@ -3,7 +3,7 @@
|
|||
"logo": "logos/farsight.png",
|
||||
"requirements": ["An access to the Farsight Passive DNS API (apikey)"],
|
||||
"input": "A domain, hostname or IP address MISP attribute.",
|
||||
"output": "Text containing information about the input, resulting from the query on the Farsight Passive DNS API.",
|
||||
"references": ["https://www.farsightsecurity.com/"],
|
||||
"features": "This module takes a domain, hostname or IP address MISP attribute as input to query the Farsight Passive DNS API. The API returns then the result of the query with some information about the value queried."
|
||||
"output": "Passive-dns objects, resulting from the query on the Farsight Passive DNS API.",
|
||||
"references": ["https://www.farsightsecurity.com/", "https://docs.dnsdb.info/dnsdb-api/"],
|
||||
"features": "This module takes a domain, hostname or IP address MISP attribute as input to query the Farsight Passive DNS API.\n The results of rdata and rrset lookups are then returned and parsed into passive-dns objects.\n\nAn API key is required to submit queries to the API.\n It is also possible to define a custom server URL, and to set a limit of results to get.\n This limit is set for each lookup, which means we can have an up to the limit number of passive-dns objects resulting from an rdata query about an IP address, but an up to the limit number of passive-dns objects for each lookup queries about a domain or a hostname (== twice the limit)."
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue