Onyphe-Data-Model.xml
|
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<Use-Onyphe> <data-model> <search>datascan</search> <search>synscan</search> <search>inetnum</search> <search>threatlist</search> <search>pastries</search> <search>resolver</search> <search>sniffer</search> <search>onionscan</search> <filter>asn</filter> <filter>city</filter> <filter>count</filter> <filter>country</filter> <filter>country_name</filter> <filter>data</filter> <filter>distinct</filter> <filter>domain</filter> <filter>forward</filter> <filter>hostname</filter> <filter>information</filter> <filter>ip</filter> <filter>ipv6</filter> <filter>key</filter> <filter>location</filter> <filter>netname</filter> <filter>onion</filter> <filter>organization</filter> <filter>os</filter> <filter>port</filter> <filter>product</filter> <filter>productversion</filter> <filter>protocol</filter> <filter>reverse</filter> <filter>since</filter> <filter>source</filter> <filter>subnet</filter> <filter>threatlist</filter> <filter>total</filter> <filter>datamd5</filter> <filter>abuse</filter> <filter>tld</filter> <filter>subdomains</filter> <filter>host</filter> <filter>url</filter> <filter>cve</filter> <filter>title</filter> <filter>user</filter> <filter>syntax</filter> <filter>osdistribution</filter> <filter>osversion</filter> <filter>content</filter> <filter>type</filter> <filter>transport</filter> <filter>content</filter> <filter>app.length</filter> <filter>app.extract.ip</filter> <filter>app.extract.file</filter> <filter>app.extract.hostname</filter> <filter>app.extract.domain</filter> <filter>app.smb.workgroup</filter> <filter>app.smb.nullsession</filter> <filter>app.smb.servername</filter> <filter>app.smb.share</filter> <filter>app.http.realm</filter> <filter>app.http.title</filter> <filter>app.http.keywords</filter> <filter>app.http.description</filter> <filter>app.http.copyright</filter> <filter>app.rtsp.realm</filter> <filter>app.elasticsearch.product</filter> <filter>app.elasticsearch.productversion</filter> <filter>app.elasticsearch.clustername</filter> <filter>app.elasticsearch.luceneversion</filter> <filter>app.kibana.product</filter> <filter>app.kibana.productversion</filter> <filter>app.mongodb.product</filter> <filter>app.mongodb.productversion</filter> <filter>app.mongodb.name</filter> <filter>app.dns.versionbind</filter> <api>myip</api> <api>geoloc</api> <api>user</api> <api>inetnum</api> <api>thratlist</api> <api>pastries</api> <api>synscan</api> <api>datascan</api> <api>reverse</api> <api>forward</api> <api>search</api> <results></results> </data-model> </Use-Onyphe> |