Add analyzer configuration description

2025-12-06 01:02:46 +01:00 · 2023-08-30 19:16:38 +00:00
parent fe690922de
commit 8cc19b0748
1 changed files with 142 additions and 0 deletions
--- a/salt/sensoroni/soc_sensoroni.yaml
+++ b/salt/sensoroni/soc_sensoroni.yaml
@@ -37,3 +37,145 @@ sensoroni:
      helpLink: sensoroni.html
      global: True
      advanced: True
+  analyzers:
+    emailrep:
+      api_key:
+        description: API key for the EmailRep analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: True
+        advanced: True
+        forcedType: string
+      base_url:
+        description: Base URL for the EmailRep analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: string
+    greynoise:
+      api_key:
+        description: API key for the GreyNoise analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: True
+        advanced: True
+        forcedType: string
+      api_version:
+        description: API key for the GreyNoise analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: string
+      base_url:
+        description: Base URL for the GreyNoise analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: string
+    localfile:
+      file_path:
+        description: File path for the LocalFile analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: "[]string"
+    otx:
+      api_key:
+        description: API key for the OTX analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: True
+        advanced: True
+        forcedType: string
+      base_url:
+        description: Base URL for the OTX analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: string
+    pulsedive:
+      api_key:
+        description: API key for the Pulsedive analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: True
+        advanced: True
+        forcedType: string
+      base_url:
+        description: Base URL for the Pulsedive analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: string
+    spamhaus:
+      lookup_host:
+        description: Host to use for lookups.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: string
+      nameservers:
+        description: Nameservers used for queries.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedTypes: "[]string"
+    urlscan:
+      api_key:
+        description: API key for the Urlscan analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: True
+        advanced: True
+        forcedType: string
+      base_url:
+        description: Base URL for the Urlscan analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: string
+      enabled:
+        description: Analyzer enabled
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: bool
+      timeout:
+        description: Timeout for the Urlscan analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: int
+      visibility:
+        description: Type of visibility.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: string
+    virustotal:
+      api_key:
+        description: API key for the VirusTotal analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: True
+        advanced: True
+        forcedType: string
+      base_url:
+        description: Base URL for the VirusTotal analyzer.
+        helpLink: sensoroni.html
+        global: True
+        sensitive: False
+        advanced: True
+        forcedType: string