Exposure Custom Action

Document created by Massimiliano Faudarole on Aug 17, 2015Last modified by Massimiliano Faudarole on Aug 17, 2015
Version 2Show Document
  • View in full screen mode

If someone need, i've added custom action for Exposure Iseclab Search.

First by domain name, second by ipaddress.

Feel free to change/modify/ignore everithing.

 

Regards

 

{

    "displayName": "Exposure Search By Domain",

    "cssClasses": [

        "domain",

        "alias-host",

        "alias.host",

        "domain.dst",

        "domain-dst"

    ],

    "description": "",

    "type": "UAP.common.contextmenu.actions.URLContextAction",

    "version": "1",

    "modules": [

        "investigation"

    ],

    "local": "false",

    "groupName": "externalLookupGroup",

    "urlFormat": "http://exposure.iseclab.org/search/?q={0}",

    "disabled": "",

    "id": "exposureSearch",

    "moduleClasses": [

        "UAP.investigation.navigate.view.NavigationPanel",

        "UAP.investigation.events.view.EventGrid"

    ],

    "openInNewTab": "true",

    "order": "26"

}

 

 

 

 

 

 

{

    "displayName": "Exposure Search By IP",

    "cssClasses": [

        "ip-src",

        "ip-dst",

        "ip.src",

        "ip.dst",

        "ipv6-src",

        "ipv6-dst",

        "ipv6.src",

        "ipv6.dst",

        "orig_ip"

    ],

    "description": "",

    "type": "UAP.common.contextmenu.actions.URLContextAction",

    "version": "1",

    "modules": [

        "investigation"

    ],

    "local": "false",

    "groupName": "externalLookupGroup",

    "urlFormat": "http://exposure.iseclab.org/detection/ip?ip={0}",

    "disabled": "",

    "id": "exposureSearchip",

    "moduleClasses": [

        "UAP.investigation.navigate.view.NavigationPanel",

        "UAP.investigation.events.view.EventGrid"

    ],

    "openInNewTab": "true",

    "order": "27"

}

Attachments

    Outcomes