mirror of https://github.com/MISP/misp-modules
14 lines
698 B
JSON
14 lines
698 B
JSON
{
|
|
"description": "An expansion module to enrich attributes in MISP by quering the Cytomic Orion API",
|
|
"logo": "cytomic_orion.png",
|
|
"requirements": [
|
|
"Access (license) to Cytomic Orion"
|
|
],
|
|
"input": "MD5, hash of the sample / malware to search for.",
|
|
"output": "MISP objects with sightings of the hash in Cytomic Orion. Includes files and machines.",
|
|
"references": [
|
|
"https://www.vanimpe.eu/2020/03/10/integrating-misp-and-cytomic-orion/",
|
|
"https://www.cytomicmodel.com/solutions/"
|
|
],
|
|
"features": "This module takes an MD5 hash and searches for occurrences of this hash in the Cytomic Orion database. Returns observed files and machines."
|
|
} |