Plugins/Published Plugins/GreyNoiseCommunity/GreynoiseCommunity_Manifest.yaml (24 lines of code) (raw):
Descriptor:
Name: GreyNoise Community
DisplayName: GreyNoise Community (Preview) Plugin
DescriptionDisplay: GreyNoise Community provides insight if an IP has been observed mass-scanning the internet or is part of a common business service.
Description: |-
Use this skill-set to call the GreyNoise API if the user provides a given IP and wants to know assess the likelihood of the IP address being associated with mass internet scanning.
- This skill only invokes the GreyNoise Community API.
- LookupIpAddressNoise: Gets noise information about an IP address (v4 only). Internet scanning activity is provided by GreyNoise if an IP has been observed scanning by the GreyNoise sensor network and is associated with malicious activities.
- Classifies the IP address as benign, suspicious, or malicious
- Presents the last time the IP address was observed
- Published by Microsoft and GreyNoise
Category: Other
Icon: https://info.greynoise.io/hubfs/greynoise_logo.png
SupportedAuthTypes:
- ApiKey
Authorization:
Type: APIKey
Key: Key
Location: Header
AuthScheme: ''
SkillGroups:
- Format: API
Settings:
OpenApiSpecUrl: https://gist.githubusercontent.com/bradchiappetta/85e2a0da55292e59e1bbd684c7d10579/raw/bef0494698f6c4364f40fd942c6e2a23321a6b0b/GreynoiseCommunity_OpenAPI.yaml