add: Added documentation for expansion modules

doc/expansion/asn_history.json

@@ -0,0 +1,4 @@
+{
+    "description": "Query an ASN description history service (https://github.com/CIRCL/ASN-Description-History.git).",
+    "requirements": ["asnhistory"]
+}

doc/expansion/circl_passivedns.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to access CIRCL Passive DNS.",
+    "logo": "logos/passivedns.png"
+}

doc/expansion/circl_passivessl.json

@@ -0,0 +1,4 @@
+{
+    "description": "Modules to access CIRCL Passive SSL.",
+    "logo": "logos/passivessl.png"
+}

doc/expansion/countrycode.json

@@ -0,0 +1,3 @@
+{
+    "description": "Module to expand country codes."
+}

doc/expansion/crowdstrike_falcon.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to query Crowdstrike Falcon.",
+    "logo": "logos/crowdstrike.png"
+}

doc/expansion/cve.json

@@ -0,0 +1,3 @@
+{
+    "description": "An expansion hover module to expand information about CVE id."
+}

doc/expansion/dbl_spamhaus.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to check Spamhaus DBL for a domain name.",
+    "logo": "logos/spamhaus.jpg"
+}

doc/expansion/dns.json

@@ -0,0 +1,3 @@
+{
+    "description": "A simple DNS expansion service to resolve IP address from MISP attributes."
+}

doc/expansion/domaintools.json

@@ -0,0 +1,4 @@
+{
+    "description": "DomainTools MISP expansion module.",
+    "logo": "logos/domaintools.png"
+}

doc/expansion/eupi.json

@@ -0,0 +1,4 @@
+{
+    "description": "A module to query the Phishing Initiative service (https://phishing-initiative.lu).",
+    "logo": "logos/eupi.png"
+}

doc/expansion/farsight_passivedns.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to access Farsight DNSDB Passive DNS.",
+    "logo": "logos/farsight.png"
+}

doc/expansion/geoip_country.json

@@ -0,0 +1,3 @@
+{
+    "description": "Module to query a local copy of Maxminds Geolite database."
+}

doc/expansion/intelmq_eventdb.json

@@ -0,0 +1,3 @@
+{
+    "description": "Module to access intelmqs eventdb."
+}

doc/expansion/ipasn.json

@@ -0,0 +1,3 @@
+{
+    "description": "Module to query an IP ASN history service (https://github.com/CIRCL/IP-ASN-history.git)."
+}

doc/expansion/iprep.json

@@ -0,0 +1,3 @@
+{
+    "description": "Module to query IPRep data for IP addresses."
+}

doc/expansion/onyphe.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to process a query on Onyphe.",
+    "logo": "logos/onyphe.jpg"
+}

doc/expansion/onyphe_full.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to process a full query on Onyphe.",
+    "logo": "logos/onyphe.jpg"
+}

doc/expansion/otx.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to get information from AlienVault OTX.",
+    "logo": "logos/otx.png"
+}

doc/expansion/passivetotal.json

@@ -0,0 +1,4 @@
+{
+    "description": "The PassiveTotal MISP expansion module brings the datasets derived from Internet scanning directly into your MISP instance. This module supports passive DNS, historic SSL, WHOIS, and host attributes. In order to use the module, you must have a valid PassiveTotal account username and API key. Registration is free and can be done by visiting https://www.passivetotal.org/register",
+    "logo": "logos/passivetotal.png"
+}

doc/expansion/rbl.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to check an IPv4 address against known RBLs.",
+    "requirements": ["dnspython3"]
+}

doc/expansion/reversedns.json

@@ -0,0 +1,3 @@
+{
+    "description": "Simple Reverse DNS expansion service to resolve reverse DNS from MISP attributes."
+}

doc/expansion/shodan.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to query on Shodan.",
+    "logo": "logos/shodan.png"
+}

doc/expansion/sourcecache.json

@@ -0,0 +1,3 @@
+{
+    "description": "Module to cache web pages of analysis reports, OSINT sources. The module returns a link of the cached page."
+}

doc/expansion/threatcrowd.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to get information from ThreatCrowd.",
+    "logo": "logos/threatcrowd.png"
+}

doc/expansion/threatminer.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to get information from ThreatMiner.",
+    "logo": "logos/threatminer.png"
+}

doc/expansion/virustotal.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to get information from virustotal.",
+    "logo": "logos/virustotal.png"
+}

doc/expansion/vmray_submit.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to submit a sample to VMRay.",
+    "logo": "logos/vmray.png"
+}

doc/expansion/vulndb.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to query VulnDB (RiskBasedSecurity.com).",
+    "logo": "logos/vulndb.png"
+}

doc/expansion/whois.json

@@ -0,0 +1,4 @@
+{
+    "description": "Module to query a local instance of uwhois (https://github.com/rafiot/uwhoisd).",
+    "requirements": ["uwhois"]
+}

doc/expansion/wiki.json

@@ -0,0 +1,4 @@
+{
+    "description": "An expansion hover module to extract information from Wikidata to have additional information about particular term for analysis.",
+    "logo": "logos/wikidata.png"
+}

doc/expansion/xforceexchange.json

@@ -0,0 +1,4 @@
+{
+    "description": "An expansion module for IBM X-Force Exchange.",
+    "logo": "logos/xforce.png"
+}

doc/expansion/yara_syntax_validator.json

@@ -0,0 +1,4 @@
+{
+    "description": "An expansion hover module to perform a syntax check on if yara rules are valid or not.",
+    "logo": "logos/yara.png"
+}