diff --git a/default/data/ui/views/osintSweep.xml b/default/data/ui/views/osintSweep.xml index 7636494..8696799 100644 --- a/default/data/ui/views/osintSweep.xml +++ b/default/data/ui/views/osintSweep.xml @@ -115,7 +115,7 @@ - /app/OSweep/urlhaus?form.group=no&form.group_value=url&form.group_key=payload&form.ioc=$ioc$ + /app/OSweep/hybridAnalysis?form.group=no&form.group_value=domain&form.group_key=sha256&form.ioc=$ioc$ @@ -137,19 +137,18 @@ - /app/OSweep/urlscan?form.group=no&form.group_value=url&form.group_key=ip&form.ioc=$ioc$ + /app/OSweep/malshare?form.ioc=$ioc$ - Phishing Catcher (Score > 75) + Pastebin Dump - Scores Domains + Searches any IOC - | phishingCatcher $ioc$ -| where score > 75 + | psbdmp search $ioc$ | search NOT ("no data"=* OR invalid=* OR error=*) | stats count $earliest$ @@ -162,16 +161,17 @@ - /app/OSweep/phishingCatcher?form.monitor=no&form.time_range.earliest=-24h%40h&form.time_range.latest=now&form.ioc=$ioc$ + /app/OSweep/pastebinDump?form.ioc=$ioc$ - Pastebin Dump + Phishing Catcher (Score > 75) - Searches any IOC + Scores Domains - | psbdmp search $ioc$ + | phishingCatcher $ioc$ +| where score > 75 | search NOT ("no data"=* OR invalid=* OR error=*) | stats count $earliest$ @@ -184,7 +184,7 @@ - /app/OSweep/pastebinDump?form.ioc=$ioc$ + /app/OSweep/phishingCatcher?form.monitor=no&form.time_range.earliest=-24h%40h&form.time_range.latest=now&form.ioc=$ioc$