Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add vt connections #1742

Merged
merged 6 commits into from
Jul 2, 2018
Merged

Add vt connections #1742

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
83d3929
add connections to canvas suggestions
Jun 26, 2018
38a15f7
fix schema validation
Jun 26, 2018
5b2e661
add VT connections
Jul 1, 2018
5fc6e02
Merge branches 'addVTConnections' and 'master' of github.com:demisto/…
Jul 1, 2018
ab710f2
fix json
Jul 1, 2018
e064ee5
fix CR
Jul 2, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
160 changes: 155 additions & 5 deletions Connections/canvas-context-connections.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,17 +62,167 @@
"connectionDescription": "Belongs to the same endpoint",
"parentContextKey": "Endpoint"
},

{
"contextKey1": "Hostname",
"contextKey2": "MAC",
"connectionDescription": "Belongs to the same endpoint",
"parentContextKey": "Endpoint"
"contextKey1": "SSDeep",
"contextKey2": "MD5",
"connectionDescription": "Belongs to the same file",
"parentContextKey": "File"
},
{
"contextKey1": "MAC",
"contextKey1": "Username",
"contextKey2": "Email.Address",
"connectionDescription": "User's email address",
"parentContextKey": "Account"
},
{
"contextKey1": "Username",
"contextKey2": "Domain",
"connectionDescription": "User's domain",
"parentContextKey": "Account"
},
{
"contextKey1": "Email.Domain",
"contextKey2": "Email.Address",
"connectionDescription": "Email's domain",
"parentContextKey": "Account"
},

{
"contextKey1": "Hostname",
"contextKey2": "IP",
"connectionDescription": "Belongs to the same endpoint",
"parentContextKey": "Endpoint"
},

{
"contextKey1": "Hash",
"contextKey2": "RelatedDomains",
"connectionDescription": "Related domain",
"parentContextKey": "File"
},
{
"contextKey1": "Hash",
"contextKey2": "RelatedHosts",
"connectionDescription": "Related host",
"parentContextKey": "File"
},
{
"contextKey1": "Hash",
"contextKey2": "RelatedIPs",
"connectionDescription": "Related ip",
"parentContextKey": "File"
},
{
"contextKey1": "Hash",
"contextKey2": "RelatedURLs",
"connectionDescription": "Related url",
"parentContextKey": "File"
},
{
"contextKey1": "Hash",
"contextKey2": "CommunicatedHosts",
"connectionDescription": "Communicated with host",
"parentContextKey": "File"
},
{
"contextKey1": "Hash",
"contextKey2": "CommunicatedIPs",
"connectionDescription": "Communicated with ip",
"parentContextKey": "File"
},
{
"contextKey1": "Hash",
"contextKey2": "CommunicatedURLs",
"connectionDescription": "Communicated with url",
"parentContextKey": "File"
},
{
"contextKey1": "Hash",
"contextKey2": "CommunicatedDomains",
"connectionDescription": "Communicated with domain",
"parentContextKey": "File"
},

{
"contextKey1": "Name",
"contextKey2": "DownloadedHashes.sha256",
"connectionDescription": "Hash downloaded from domain",
"parentContextKey": "Domain"
},
{
"contextKey1": "Name",
"contextKey2": "Resolutions.ip_address",
"connectionDescription": "DNS resolution",
"parentContextKey": "Domain"
},
{
"contextKey1": "Name",
"contextKey2": "CommunicatingHashes.sha256",
"connectionDescription": "Hash communicated with domain",
"parentContextKey": "Domain"
},
{
"contextKey1": "Name",
"contextKey2": "Subdomains",
"connectionDescription": "Sub domain",
"parentContextKey": "Domain"
},

{
"contextKey1": "Address",
"contextKey2": "Resolutions.hostname",
"connectionDescription": "DNS resolution",
"parentContextKey": "IP"
},
{
"contextKey1": "Address",
"contextKey2": "DownloadedHashes.sha256",
"connectionDescription": "Hash downloaded from IP",
"parentContextKey": "IP"
},
{
"contextKey1": "Address",
"contextKey2": "CommunicatingHashes.sha256",
"connectionDescription": "Hash communicated with IP",
"parentContextKey": "IP"
},
{
"contextKey1": "Address",
"contextKey2": "DetectedURLs.url",
"connectionDescription": "URLs hosted at this IP address that have url scanner positive detections",
"parentContextKey": "IP"
},
{
"contextKey1": "Address",
"contextKey2": "UnAVDetectedReferrerHashes.sha256",
"connectionDescription": "UnAV Detected Referrer Hashes",
"parentContextKey": "IP"
},
{
"contextKey1": "Address",
"contextKey2": "UnAVDetectedDownloadedHashes.sha256",
"connectionDescription": "Downloaded from the IP without AV detection",
"parentContextKey": "IP"
},
{
"contextKey1": "Address",
"contextKey2": "ReferrerHashes.sha256",
"connectionDescription": "AV Detected Referrer Hashes",
"parentContextKey": "IP"
},
{
"contextKey1": "Address",
"contextKey2": "UnAVDetectedCommunicatingHashes.sha256",
"connectionDescription": "Communicated with the IP without AV detection",
"parentContextKey": "IP"
},

{
"contextKey1": "Data",
"contextKey2": "Resolutions",
"connectionDescription": "DNS resolution",
"parentContextKey": "URL"
}

]
Expand Down