TheHive-Project / Cortex-Analyzers

Cortex Analyzers Repository
https://TheHive-Project.github.io/Cortex-Analyzers/
GNU Affero General Public License v3.0
431 stars 374 forks source link

Connector for benign Indicators #1198

Open josephrqt opened 1 year ago

josephrqt commented 1 year ago

Cross-reference VirusTotal, MispwarningList and NSRL to analyze an indicator more quickly and determine its benignity

Request Type

Feature

Description

I'd like to use a tool that takes one of the following indicators as input: hashes (sha1, md5, sha1, sha256), url, mail, domain, IPs and that will submit this indicator to several analysis engines or whitelists such as VirusTotal, MispwarningList and NSRL and return its benignity in order to save time in incident response and reduce false positives.