From 9babc445ce111d620049507101c8b1cd96e315d6 Mon Sep 17 00:00:00 2001 From: Jason Ertel Date: Wed, 9 Sep 2020 12:07:18 -0400 Subject: [PATCH 1/2] Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values --- salt/soc/files/soc/soc.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/salt/soc/files/soc/soc.json b/salt/soc/files/soc/soc.json index 81efcb447..181ba7a0c 100644 --- a/salt/soc/files/soc/soc.json +++ b/salt/soc/files/soc/soc.json @@ -145,7 +145,8 @@ "actions": [ { "name": "", "description": "actionPcapHelp", "icon": "fa-stream", "link": "/joblookup?esid={eventId}" }, { "name": "", "description": "actionAlertHelp", "icon": "fa-bell", "link": "/soctopus/thehive/alert/{eventId}" }, - { "name": "", "description": "actionVirtusTotalHelp", "icon": "fa-globe", "link": "https://www.virustotal.com/gui/ip-address/{value}/detection", "fields": [ "source.ip", "destination.ip" ] } + { "name": "", "description": "actionGoogleHelp", "icon": "fa-google", "link": "https://www.google.com/search?q={value}" }, + { "name": "", "description": "actionVirusTotalHelp", "icon": "", "link": "https://www.virustotal.com/gui/search/{value}" } ] } } From fc4ad1d556200124b4e989bc825b8f6422f1d88d Mon Sep 17 00:00:00 2001 From: Jason Ertel Date: Wed, 9 Sep 2020 12:22:38 -0400 Subject: [PATCH 2/2] Add Google search quick action to Hunt; Change VirusTotal quick action to be applicable to all field values --- salt/soc/files/soc/soc.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/salt/soc/files/soc/soc.json b/salt/soc/files/soc/soc.json index 181ba7a0c..f3c103dc4 100644 --- a/salt/soc/files/soc/soc.json +++ b/salt/soc/files/soc/soc.json @@ -145,8 +145,8 @@ "actions": [ { "name": "", "description": "actionPcapHelp", "icon": "fa-stream", "link": "/joblookup?esid={eventId}" }, { "name": "", "description": "actionAlertHelp", "icon": "fa-bell", "link": "/soctopus/thehive/alert/{eventId}" }, - { "name": "", "description": "actionGoogleHelp", "icon": "fa-google", "link": "https://www.google.com/search?q={value}" }, - { "name": "", "description": "actionVirusTotalHelp", "icon": "", "link": "https://www.virustotal.com/gui/search/{value}" } + { "name": "", "description": "actionGoogleHelp", "icon": "fab fa-google", "link": "https://www.google.com/search?q={value}" }, + { "name": "actionVirusTotal", "description": "actionVirusTotalHelp", "icon": "", "link": "https://www.virustotal.com/gui/search/{value}" } ] } }