From 66b4fe9f5812c09baa9266e34652695ef0d162dd Mon Sep 17 00:00:00 2001 From: weslambert Date: Thu, 28 Apr 2022 17:14:36 -0400 Subject: [PATCH] Add additional information around URI and User Agent --- salt/sensoroni/files/analyzers/README.md | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/salt/sensoroni/files/analyzers/README.md b/salt/sensoroni/files/analyzers/README.md index 83c4cfb77..425fd5130 100644 --- a/salt/sensoroni/files/analyzers/README.md +++ b/salt/sensoroni/files/analyzers/README.md @@ -5,15 +5,16 @@ Security Onion provides a means for performing data analysis on varying inputs. ## Supported Observable Types The built-in analyzers support the following observable types: -| Name | Domain | Hash | IP | JA3 | URL | -| ------------------------|--------|-------|-------|-------|-------| -| Alienvault OTX |✓ |✓|✓|✗|✓| -| Greynoise |✗ |✗|✓|✗|✗| -| JA3er |✗ |✗|✗|✓|✗| -| LocalFile |✓ |✓|✓|✓|✓| -| Spamhaus |✗ |✗|✓|✗|✗| -| Urlhaus |✗ |✗|✗|✗|✓| -| Virustotal |✓ |✓|✓|✗|✓| +| Name | Domain | Hash | IP | JA3 | Other | URI | URL | User Agent | +| ------------------------|--------|-------|-------|-------|-------|-------|-------|-------| +| Alienvault OTX |✓ |✓|✓|✗|✗|✗|✓|✗| +| Greynoise |✗ |✗|✓|✗|✗|✗|✗|✗| +| JA3er |✗ |✗|✗|✓|✗|✗|✗|✗| +| LocalFile |✓ |✓|✓|✓|✓|✗|✓|✗| +| Pulsedive |✓ |✓|✓|✗|✗|✓|✓|✓| +| Spamhaus |✗ |✗|✓|✗|✗|✗|✗|✗| +| Urlhaus |✗ |✗|✗|✗|✗|✗|✓|✗| +| Virustotal |✓ |✓|✓|✗|✗|✗|✓|✗| ## Developer Guide