2023-10-12 08:43:01 +02:00
|
|
|
{
|
|
|
|
"description": "Event contains one or more entries of known hostname querying your source IP.",
|
|
|
|
"list": [
|
2023-10-13 09:43:37 +02:00
|
|
|
"api.extralargecoffee.com",
|
2023-10-12 08:43:01 +02:00
|
|
|
"ip.parrotdns.com",
|
2023-10-13 09:43:37 +02:00
|
|
|
"whoami.akamai.net"
|
2023-10-12 08:43:01 +02:00
|
|
|
],
|
|
|
|
"matching_attributes": [
|
|
|
|
"domain",
|
|
|
|
"hostname",
|
|
|
|
"domain|ip"
|
|
|
|
],
|
|
|
|
"name": "List of known hostname used for querying your source IP. This can be used as exclusion for your Passive DNS lookup.",
|
|
|
|
"type": "hostname",
|
|
|
|
"version": 1
|
|
|
|
}
|