Add AlienVault OTX domain threat intelligence source
This commit is contained in:
parent
1242a381ab
commit
faae2f80c5
3 changed files with 358 additions and 0 deletions
|
|
@ -21,6 +21,7 @@ widely-used reputation systems.
|
|||
| Disconnect.me | downloaded list | no | user (default on) |
|
||||
| OISD | downloaded list | no | user (default on) |
|
||||
| VirusTotal v3 | HTTPS lookup | yes (admin) | admin |
|
||||
| AlienVault OTX | HTTPS lookup | free (admin) | admin |
|
||||
|
||||
### Obtaining API keys
|
||||
|
||||
|
|
@ -42,6 +43,11 @@ widely-used reputation systems.
|
|||
3. Free tier: 4 requests/minute, 500 requests/day. No billing required.
|
||||
4. The public API key is sufficient; premium keys unlock higher quotas.
|
||||
|
||||
**AlienVault OTX** (option: `otx_api_key`)
|
||||
1. Register a free account at [otx.alienvault.com](https://otx.alienvault.com/).
|
||||
2. Go to *Settings → API Integration* to find your personal OTX key.
|
||||
3. Free, no documented rate limits for the indicator lookup API.
|
||||
|
||||
DNS-based blocklists are queried in parallel. The OpenPhish feed is
|
||||
downloaded once per hour by the provider and cached in memory.
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue