17 lines
743 B
INI
17 lines
743 B
INI
# Arkime WISE data source config file
|
|
# See also https://github.com/arkime/arkime/wiki/WISE
|
|
# https://github.com/arkime/arkime/blob/master/release/wise.ini.sample
|
|
#
|
|
|
|
[wiseService]
|
|
port = 8081
|
|
excludeDomains=*.bl.barracudabrts.com;*.zen.spamhaus.org;*.in-addr.arpa;*.avts.mcafee.com;*.avqs.mcafee.com;*.bl.barracuda.com;*.lbl8.mailshell.net;*.dnsbl.sorbs.net;*.s.sophosxl.net;*.metric.gstatic.com;*.ip6.arpa
|
|
|
|
[zeeklogs]
|
|
key=
|
|
|
|
[right-click]
|
|
VTIP=url:https://www.virustotal.com/en/ip-address/%TEXT%/information/;name:Virus Total IP;category:ip
|
|
VTHOST=url:https://www.virustotal.com/en/domain/%HOST%/information/;name:Virus Total Host;category:host
|
|
VTURL=url:https://www.virustotal.com/latest-scan/%URL%;name:Virus Total URL;category:url
|