Files
securityonion/salt/sensoroni/files/analyzers/echotrail
2023-12-13 13:45:48 -05:00
..
2023-12-13 13:45:48 -05:00
2023-12-13 13:45:48 -05:00
2023-12-13 13:45:48 -05:00
2023-12-13 13:45:48 -05:00
2023-12-13 13:45:48 -05:00
2023-12-13 13:45:48 -05:00

EchoTrail

Description

Submit a filename, hash, commandline to EchoTrail for analysis

Configuration Requirements

In SOC, navigate to Administration, toggle Show all configurable settings, including advanced settings., and navigate to sensoroni -> analyzers -> echotrail.

echotrail

The following configuration options are available for:

api_key - API key used for communication with the Echotrail API (Required)

This value should be set in the sensoroni pillar, like so:

sensoroni:
  analyzers:
    echotrail:
      api_key: $yourapikey