mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-15 21:52:47 +01:00
182 lines
4.9 KiB
YAML
182 lines
4.9 KiB
YAML
sensoroni:
|
|
enabled:
|
|
description: Enable or disable Sensoroni.
|
|
advanced: True
|
|
helpLink: sensoroni.html
|
|
config:
|
|
analyze:
|
|
enabled:
|
|
description: Enable or disable the analyzer.
|
|
advanced: True
|
|
helpLink: sensoroni.html
|
|
timeout_ms:
|
|
description: Timeout period for the analyzer.
|
|
advanced: True
|
|
helpLink: sensoroni.html
|
|
parallel_limit:
|
|
description: Parallel limit for the analyzer.
|
|
advanced: True
|
|
helpLink: sensoroni.html
|
|
node_checkin_interval_ms:
|
|
description: Interval in ms to checkin to the soc_host.
|
|
advanced: True
|
|
helpLink: sensoroni.html
|
|
node_description:
|
|
description: Description of the specific node.
|
|
helpLink: sensoroni.html
|
|
node: True
|
|
forcedType: string
|
|
sensoronikey:
|
|
description: Shared key for sensoroni authentication.
|
|
helpLink: sensoroni.html
|
|
global: True
|
|
sensitive: True
|
|
advanced: True
|
|
soc_host:
|
|
description: Host for sensoroni agents to connect to.
|
|
helpLink: sensoroni.html
|
|
global: True
|
|
advanced: True
|
|
analyzers:
|
|
emailrep:
|
|
api_key:
|
|
description: API key for the EmailRep analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: True
|
|
advanced: True
|
|
forcedType: string
|
|
base_url:
|
|
description: Base URL for the EmailRep analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: string
|
|
greynoise:
|
|
api_key:
|
|
description: API key for the GreyNoise analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: True
|
|
advanced: True
|
|
forcedType: string
|
|
api_version:
|
|
description: API version for the GreyNoise analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: string
|
|
base_url:
|
|
description: Base URL for the GreyNoise analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: string
|
|
localfile:
|
|
file_path:
|
|
description: File path for the LocalFile analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: "[]string"
|
|
otx:
|
|
api_key:
|
|
description: API key for the OTX analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: True
|
|
advanced: True
|
|
forcedType: string
|
|
base_url:
|
|
description: Base URL for the OTX analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: string
|
|
pulsedive:
|
|
api_key:
|
|
description: API key for the Pulsedive analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: True
|
|
advanced: True
|
|
forcedType: string
|
|
base_url:
|
|
description: Base URL for the Pulsedive analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: string
|
|
spamhaus:
|
|
lookup_host:
|
|
description: Host to use for lookups.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: string
|
|
nameservers:
|
|
description: Nameservers used for queries.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedTypes: "[]string"
|
|
urlscan:
|
|
api_key:
|
|
description: API key for the Urlscan analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: True
|
|
advanced: True
|
|
forcedType: string
|
|
base_url:
|
|
description: Base URL for the Urlscan analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: string
|
|
enabled:
|
|
description: Analyzer enabled
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: bool
|
|
timeout:
|
|
description: Timeout for the Urlscan analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: int
|
|
visibility:
|
|
description: Type of visibility.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: string
|
|
virustotal:
|
|
api_key:
|
|
description: API key for the VirusTotal analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: True
|
|
advanced: True
|
|
forcedType: string
|
|
base_url:
|
|
description: Base URL for the VirusTotal analyzer.
|
|
helpLink: sensoroni.html
|
|
global: False
|
|
sensitive: False
|
|
advanced: True
|
|
forcedType: string
|