Add additional information around URI and User Agent

This commit is contained in:
weslambert
2022-04-28 17:14:36 -04:00
committed by GitHub
parent c001708707
commit 66b4fe9f58

View File

@@ -5,15 +5,16 @@ Security Onion provides a means for performing data analysis on varying inputs.
## Supported Observable Types
The built-in analyzers support the following observable types:
| Name | Domain | Hash | IP | JA3 | URL |
| ------------------------|--------|-------|-------|-------|-------|
| Alienvault OTX |✓ |✓|✓|✗|✓|
| Greynoise |✗ |✗|✓|✗|✗|
| JA3er |✗ |✗|✗|✓|✗|
| LocalFile |✓ |✓|✓|✓|✓|
| Spamhaus |✗ |✗|✓|✗|✗|
| Urlhaus |✗ |✗|✗|✗|✓|
| Virustotal |✓ |✓|✓|✗|✓|
| Name | Domain | Hash | IP | JA3 | Other | URI | URL | User Agent |
| ------------------------|--------|-------|-------|-------|-------|-------|-------|-------|
| Alienvault OTX |✓ |✓|✓|✗|✗|✗|✓|✗|
| Greynoise |✗ |✗|✓|✗|✗|✗|✗|✗|
| JA3er |✗ |✗|✗|✓|✗|✗|✗|✗|
| LocalFile |✓ |✓|✓|✓|✓|✗|✓|✗|
| Pulsedive |✓ |✓|✓|✗|✗|✓|✓|✓|
| Spamhaus |✗ |✗|✓|✗|✗|✗|✗|✗|
| Urlhaus |✗ |✗|✗|✗|✗|✗|✓|✗|
| Virustotal |✓ |✓|✓|✗|✗|✗|✓|✗|
## Developer Guide