JSB with doc

TheHive-Project · Sep 2, 2021 · 541afb1 · 541afb1
1 parent 9933d90
commit 541afb1
Show file tree

Hide file tree

Showing 8 changed files with 46 additions and 96 deletions.
diff --git a/analyzers/JoeSandbox/JoeSandbox_File_Analysis_Inet.json b/analyzers/JoeSandbox/JoeSandbox_File_Analysis_Inet.json
@@ -50,21 +50,38 @@
       "required": true,
       "defaultValue": false 
     },
-	{
+	  {
       "name": "images",
       "description": "Allow images in the report",
       "type": "boolean",
       "multi": false,
       "required": true,
       "defaultValue": false 
     },
-	{
+	  {
 	  "name": "observables",
       "description": "Creat observables form report",
       "type": "boolean",
       "multi": false,
       "required": true,
       "defaultValue": false 
-	}
+	  }
+  ],
+  "registration_required": true,
+  "subscription_required": true,
+
+  "screenshots": [
+    {
+      "path": "assets/HTML_report.png",
+      "caption": "EmlParser: HTML report"
+    },
+    {
+      "path": "assets/images_preview.png",
+      "caption": "EmlParser: images preview"
+    },
+    {
+      "path": "assets/IP_URL.png",
+      "caption": "EmlParser: IP and URL"
+    }
   ]
 }
diff --git a/analyzers/JoeSandbox/JoeSandbox_File_Analysis_Noinet.json b/analyzers/JoeSandbox/JoeSandbox_File_Analysis_Noinet.json
@@ -66,5 +66,18 @@
       "required": true,
       "defaultValue": false 
 	}
-  ]
+  ],
+  "registration_required": true,
+  "subscription_required": true,
+
+  "screenshots": [
+    {
+      "path": "assets/HTML_report.png",
+      "caption": "EmlParser: HTML report"
+    },
+    {
+      "path": "assets/images_preview.png",
+      "caption": "EmlParser: images preview"
+    }
+  ]  
 }
diff --git a/analyzers/JoeSandbox/JoeSandbox_Full_Report_File_Analysis_Inet.json b/analyzers/JoeSandbox/JoeSandbox_Full_Report_File_Analysis_Inet.json
diff --git a/analyzers/JoeSandbox/JoeSandbox_Full_Report_File_Analysis_Noinet.json b/analyzers/JoeSandbox/JoeSandbox_Full_Report_File_Analysis_Noinet.json
diff --git a/analyzers/JoeSandbox/README.md b/analyzers/JoeSandbox/README.md
@@ -0,0 +1,12 @@
+### Joe SandBox
+
+With the version 3.0 this analyzer allow you to have:
+- the HTML report as an observable
+- the screenshot from Joe Sandbox in the analysis report
+- IP and URL as observable
+
+
+This analyzer has 3 flavors:
+- URL analysis
+- File analysis inet
+- File analysis noinet
diff --git a/analyzers/JoeSandbox/assets/HTML_report.png b/analyzers/JoeSandbox/assets/HTML_report.png
diff --git a/analyzers/JoeSandbox/assets/IP_URL.png b/analyzers/JoeSandbox/assets/IP_URL.png
diff --git a/analyzers/JoeSandbox/assets/images_preview.png b/analyzers/JoeSandbox/assets/images_preview.png