add dataType mail-subject #1260 (#1261)

TheHive-Project · Jun 12, 2024 · 00565e5 · 00565e5
1 parent 5cefed3
commit 00565e5
Show file tree

Hide file tree

Showing 6 changed files with 28 additions and 6 deletions.
diff --git a/analyzers/Jupyter_Analyzer/Jupyter_Run_Notebook_Analyzer.json b/analyzers/Jupyter_Analyzer/Jupyter_Run_Notebook_Analyzer.json
@@ -18,7 +18,8 @@
     "registry",
     "regexp",
     "other",
-    "filename"
+    "filename",
+    "mail-subject"
   ],
   "description": "Execute a parameterized notebook in Jupyter",
   "baseConfig": "Jupyter",

diff --git a/analyzers/MISP/MISP.json b/analyzers/MISP/MISP.json
@@ -18,7 +18,8 @@
     "registry",
     "regexp",
     "other",
-    "filename"
+    "filename",
+    "mail-subject"
   ],
   "baseConfig": "MISP",
   "command": "MISP/misp.py",

diff --git a/analyzers/OpenCTI/OpenCTI_SearchExactObservable.json b/analyzers/OpenCTI/OpenCTI_SearchExactObservable.json
@@ -18,7 +18,8 @@
     "registry",
     "regexp",
     "other",
-    "filename"
+    "filename",
+    "mail-subject"
   ],
   "config": {
       "service": "search_exact"

diff --git a/analyzers/OpenCTI/OpenCTI_SearchObservables.json b/analyzers/OpenCTI/OpenCTI_SearchObservables.json
@@ -18,7 +18,8 @@
     "registry",
     "regexp",
     "other",
-    "filename"
+    "filename",
+    "mail-subject"
   ],
   "config": {
       "service": "search_observables"

diff --git a/analyzers/SoltraEdge/Soltra_search.json b/analyzers/SoltraEdge/Soltra_search.json
@@ -5,7 +5,22 @@
     "url": "http://soltra.com/en/",
     "license" : "AGPL-V3",
     "description": "Query against Soltra Edge.",
-    "dataTypeList": ["domain", "ip", "url", "fqdn", "uri_path","user-agent", "hash", "mail", "mail_subject" , "registry", "regexp", "other", "filename"],
+  "dataTypeList": [
+    "domain",
+    "ip",
+    "url",
+    "fqdn",
+    "uri_path",
+    "user-agent",
+    "hash",
+    "mail",
+    "mail_subject",
+    "registry",
+    "regexp",
+    "other",
+    "filename",
+    "mail-subject"
+  ],
     "command": "SoltraEdge/soltra.py",
     "baseConfig": "Soltra_Edge",
     "config": {

diff --git a/analyzers/Splunk/Splunk_Search_mail_subject.json b/analyzers/Splunk/Splunk_Search_mail_subject.json
@@ -4,7 +4,10 @@
   "url": "https://www.splunk.com",
   "author": "Unit777, LetMeR00t",
   "license": "AGPL-V3",
-  "dataTypeList": ["mail_subject"],
+  "dataTypeList": [
+    "mail_subject",
+    "mail-subject"
+  ],
   "description": "Execute a savedsearch on a Splunk instance with a mail subject as argument",
   "baseConfig": "Splunk",
   "config": {