Onyphe-Data-Model.xml
|
<Objs Version="1.1.0.1" xmlns="http://schemas.microsoft.com/powershell/2004/04"> <Obj RefId="0"> <TN RefId="0"> <T>Selected.System.Management.Automation.PSCustomObject</T> <T>System.Management.Automation.PSCustomObject</T> <T>System.Object</T> </TN> <MS> <Obj N="apis" RefId="1"> <TN RefId="1"> <T>System.Object[]</T> <T>System.Array</T> <T>System.Object</T> </TN> <LST> <S>/api/ctl</S> <S>/api/datascan</S> <S>/api/forward</S> <S>/api/geoloc</S> <S>/api/inetnum</S> <S>/api/ip</S> <S>/api/md5</S> <S>/api/myip</S> <S>/api/onionscan</S> <S>/api/pastries</S> <S>/api/resolver</S> <S>/api/reverse</S> <S>/api/search</S> <S>/api/search/ctl</S> <S>/api/search/datascan</S> <S>/api/search/datashot</S> <S>/api/search/geoloc</S> <S>/api/search/inetnum</S> <S>/api/search/onionscan</S> <S>/api/search/onionshot</S> <S>/api/search/pastries</S> <S>/api/search/resolver</S> <S>/api/search/sniffer</S> <S>/api/search/synscan</S> <S>/api/search/threatlist</S> <S>/api/sniffer</S> <S>/api/synscan</S> <S>/api/threatlist</S> <S>/api/user</S> </LST> </Obj> <Obj N="filters" RefId="2"> <TNRef RefId="1" /> <LST> <S>abuse</S> <S>asn</S> <S>city</S> <S>count</S> <S>country</S> <S>data</S> <S>datamd5</S> <S>distinct</S> <S>domain</S> <S>forward</S> <S>hostname</S> <S>information</S> <S>ip</S> <S>ipv6</S> <S>key</S> <S>location</S> <S>netname</S> <S>organization</S> <S>osvendor</S> <S>os</S> <S>osversion</S> <S>port</S> <S>productvendor</S> <S>product</S> <S>productversion</S> <S>protocol</S> <S>protocolversion</S> <S>reason</S> <S>reverse</S> <S>since</S> <S>source</S> <S>status</S> <S>subnet</S> <S>threatlist</S> <S>total</S> <S>transport</S> <S>type</S> <S>basicconstraints</S> <S>botnet</S> <S>ca</S> <S>classification</S> <S>destport</S> <S>extkeyusage</S> <S>file</S> <S>fingerprint.md5</S> <S>fingerprint.sha1</S> <S>fingerprint.sha256</S> <S>host</S> <S>issuer.commonname</S> <S>issuer.country</S> <S>issuer.organization</S> <S>issuer.organizationalunit</S> <S>issuer.serial</S> <S>keyusage</S> <S>onion</S> <S>osdistribution</S> <S>osdistributionversion</S> <S>osbits</S> <S>osversionpatch</S> <S>productvendor</S> <S>productversionpatch</S> <S>publickey.algorithm</S> <S>publickey.exponent</S> <S>publickey.length</S> <S>serial</S> <S>scheme</S> <S>signature.algorithm</S> <S>size</S> <S>srcport</S> <S>syntax</S> <S>subdomains</S> <S>subject.altname</S> <S>subject.country</S> <S>subject.commonname</S> <S>subject.organization</S> <S>subject.organizationalunit</S> <S>subject.serial</S> <S>syntax</S> <S>title</S> <S>tld</S> <S>tls</S> <S>type</S> <S>url</S> <S>user</S> <S>validity.notafter</S> <S>validity.notbefore</S> <S>version</S> <S>wildcard</S> <S>content</S> <S>app.dns.versionbind</S> <S>app.elasticsearch.clustername</S> <S>app.elasticsearch.luceneversion</S> <S>app.extract.domain</S> <S>app.extract.file</S> <S>app.extract.hostname</S> <S>app.extract.ip</S> <S>app.extract.url</S> <S>app.http.bodymd5</S> <S>app.http.component.product</S> <S>app.http.component.productvendor</S> <S>app.http.component.productversion</S> <S>app.http.component.productversionpatch</S> <S>app.http.copyright</S> <S>app.http.headermd5</S> <S>app.http.header.name</S> <S>app.http.header.value</S> <S>app.http.keywords</S> <S>app.http.realm</S> <S>app.http.title</S> <S>app.length</S> <S>app.modbus.code</S> <S>app.modbus.function</S> <S>app.modbus.information</S> <S>app.modbus.product</S> <S>app.modbus.productvendor</S> <S>app.modbus.productversion</S> <S>app.modbus.productversionpatch</S> <S>app.mongodb.name</S> <S>app.ntp.leap</S> <S>app.ntp.mode</S> <S>app.ntp.stratum</S> <S>app.ntp.version</S> <S>app.rtsp.realm</S> <S>app.screenshot.format</S> <S>app.screenshot.image</S> <S>app.screenshot.imagemd5</S> <S>app.smb.nullsession</S> <S>app.smb.servername</S> <S>app.smb.share</S> <S>app.smb.workgroup</S> <S>app.snmp.community</S> <S>app.snmp.sysdescr</S> <S>app.vnc.authentication</S> <S>app.vnc.desktopname</S> <S>app.vnc.screensize</S> <S>app.vnc.version</S> <S>cpe</S> <S>cpecount</S> <S>cve</S> <S>cvecount</S> <S>device.class</S> <S>device.product</S> <S>device.productvendor</S> <S>device.productversion</S> <S>device.productversionpatch</S> <S>tag</S> </LST> </Obj> <Obj N="functions" RefId="3"> <TNRef RefId="1" /> <LST> <S>-hourago</S> <S>-dayago</S> <S>-weekago</S> <S>-monthago</S> <S>-exists</S> <S>-wildcard</S> </LST> </Obj> </MS> </Obj> </Objs> |