Skip to content

Commit 860335e

Browse files
authored
Merge pull request #756 from RamboV/main
Refactor IPQualityScore expansion module
2 parents 1832b94 + 80f7911 commit 860335e

File tree

2 files changed

+610
-90
lines changed

2 files changed

+610
-90
lines changed

documentation/README.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1347,15 +1347,16 @@ IPQualityScore MISP Expansion Module for IP reputation, Email Validation, Phone
13471347
[[source code](https://github.com/MISP/misp-modules/tree/main/misp_modules/modules/expansion/ipqs_fraud_and_risk_scoring.py)]
13481348

13491349
- **features**:
1350-
>This Module takes the IP Address, Domain, URL, Email and Phone Number MISP Attributes as input to query the IPQualityScore API.
1350+
> This Module takes the IP Address, Domain, URL, Email, Phone Number, Username MISP Attributes as input to query the IPQualityScore API.
13511351
> The results of the IPQualityScore API are than returned as IPQS Fraud and Risk Scoring Object.
13521352
> The object contains a copy of the enriched attribute with added tags presenting the verdict based on fraud score,risk score and other attributes from IPQualityScore.
1353+
> This module takes an attachment or malware-sample attribute as input to query the IPQS Malware Scanner API.
13531354

13541355
- **config**:
13551356
>apikey
13561357

13571358
- **input**:
1358-
>A MISP attribute of type IP Address(ip-src, ip-dst), Domain(hostname, domain), URL(url, uri), Email Address(email, email-src, email-dst, target-email, whois-registrant-email) and Phone Number(phone-number, whois-registrant-phone).
1359+
>A MISP attribute of type IP Address(ip-src, ip-dst), Domain(hostname, domain), URL(url, uri), Email Address(email, email-src, email-dst, target-email, whois-registrant-email), Phone Number(phone-number, whois-registrant-phone), File(attachment, malware-sample), Username(first-name, last-name, middle-name,github-username) and Password(text).
13591360

13601361
- **output**:
13611362
>IPQualityScore object, resulting from the query on the IPQualityScore API.

0 commit comments

Comments
 (0)