Intelligence Module Comparison: Internet Scanners

Internet Scanner - Intelligence Module Comparision

The following table compares the fields included for each Internet Scanner intelligence module.

Field NameTriageInvestigateHuntEndpoint(s)
actorYESYESYESIP/GNQL
botYESYESYESIP/GNQL
classificationYESYESYESIP/GNQL
ipYESYESYESIP/GNQL
last_seenYESYESYESIP/GNQL
last_seen_timestampYESYESYESIP/GNQL
metadata.asnYESYESYESIP/GNQL
metadata.categoryYESYESYESIP/GNQL
metadata.cityYESYESYESIP/GNQL
metadata.destination_countriesYESYESYESIP/GNQL
metadata.destination_country_codesYESYESYESIP/GNQL
metadata.domainYESYESYESIP/GNQL
metadata.mobileYESYESYESIP/GNQL
metadata.organizationYESYESYESIP/GNQL
metadata.rdnsYESYESYESIP/GNQL
metadata.rdns_parentYESYESYESIP/GNQL
metadata.regionYESYESYESIP/GNQL
metadata.single_destinationYESYESYESIP/GNQL
metadata.source_countryYESYESYESIP/GNQL
metadata.source_country_codeYESYESYESIP/GNQL
metadata.torYESYESYESIP/GNQL
spoofableYESYESYESIP/GNQL
stats.actor.countYESYESYESSTATS
stats.category.countYESYESYESSTATS
stats.classification.countYESYESYESSTATS
stats.destination_countries.countYESYESYESSTATS
stats.organization.countYESYESYESSTATS
stats.source_country.countYESYESYESSTATS
stats.spoofable.countYESYESYESSTATS
stats.tags.countYESYESYESSTATS
tags.created_at\YESYESYESIP/GNQL/METADATA
tags.cvesYESYESYESIP/GNQL/METADATA
tags.descriptionYESYESYESIP/GNQL/METADATA
tags.idYESYESYESIP/GNQL/METADATA
tags.intentionYESYESYESIP/GNQL/METADATA
tags.nameYESYESYESIP/GNQL/METADATA
tags.recommended_blockYESYESYESIP/GNQL/METADATA
tags.referencesYESYESYESIP/GNQL/METADATA
tags.slugYESYESYESIP/GNQL/METADATA
tags.updated_atYESYESYESIP/GNQL/METADATA
torYESYESYESIP/GNQL
vpnYESYESYESIP/GNQL
vpn_serviceYESYESYESIP/GNQL
first_seenYESYESIP/GNQL
metadata.destination_asnsYESYESIP/GNQL
metadata.destination_citiesYESYESIP/GNQL
metadata.sensor_hitsYESYESIP/GNQL
metadata.sensor_countYESYESIP/GNQL
metadata.source_latitudeYESYESIP/GNQL
metadata.source_longitudeYESYESIP/GNQL
raw_data.scan.portYESYESIP/GNQL
raw_data.scan.protocolYESYESIP/GNQL
raw_data.source.bytesYESYESIP/GNQL
stats.asn.countYESYESSTATS
cveYESIP/GNQL
metadata.osYESIP/GNQL
raw_data.hassh.fingerprintYESIP/GNQL
raw_data.hassh.portYESIP/GNQL
raw_data.http.cookie_keysYESIP/GNQL
raw_data.http.hostYESIP/GNQL
raw_data.http.md5YESIP/GNQL
raw_data.http.methodYESIP/GNQL
raw_data.http.pathYESIP/GNQL
raw_data.http.request_authorizationYESIP/GNQL
raw_data.http.request_cookiesYESIP/GNQL
raw_data.http.request_headersYESIP/GNQL
raw_data.http.request_originYESIP/GNQL
raw_data.http.useragentYESIP/GNQL
raw_data.ja3.fingerprintYESIP/GNQL
raw_data.ja3.portYESIP/GNQL
raw_data.ssh.keyYESIP/GNQL
raw_data.tls.cipherYESIP/GNQL
raw_data.tls.ja4 - COMING SOONYESIP/GNQL
stats.operating_system.countYESSTATS