From 525678eab6a1963bb5f6bf2029500687a5d356a3 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 25 Aug 2021 21:42:30 +0200 Subject: [PATCH] new: [hashlookup] documentation added --- documentation/website/expansion/hashlookup.json | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 documentation/website/expansion/hashlookup.json diff --git a/documentation/website/expansion/hashlookup.json b/documentation/website/expansion/hashlookup.json new file mode 100644 index 0000000..cb6da61 --- /dev/null +++ b/documentation/website/expansion/hashlookup.json @@ -0,0 +1,10 @@ +{ + "description": "An expansion module to query the CIRCL hashlookup services to find it if a hash is part of a known set such as NSRL.", + "logo": "cve.png", + "input": "File hashes (MD5, SHA1)", + "output": "Object with the filename associated hashes if the hash is part of a known set.", + "references": [ + "https://www.circl.lu/services/hashlookup/" + ], + "features": "The module takes file hashes as input such as a MD5 or SHA1.\n It queries the public CIRCL.lu hashlookup service and return all the hits if the hashes are known in an existing dataset. The module can be configured with a custom hashlookup url if required.\n The module can be used an hover module but also an expansion model to add related MISP objects.\n" +}