misp-modules icon indicating copy to clipboard operation
misp-modules copied to clipboard

Better orientation of passivetotal data

Open r0ny123 opened this issue 5 years ago • 0 comments

Ideas

  • At the moment, the sructure of the data, processed from PassiveTotal, in MISP, is not that better like Domaintools. It should be something like this i.e.
- Attribute                value
- whois email           [email protected]
- whois Registrar      some registrar
  • Also the pDNS, subdomains (all these missing corrently) etc. should be available via enrich module. If possible please add other data too ( see image below) i.e. Trackers, Component (very useful while tracking c2 infra) image
  • Add support for pivoting valuse from passivetotal.

r0ny123 avatar Apr 17 '20 10:04 r0ny123