-
Notifications
You must be signed in to change notification settings - Fork 0
/
config.json
96 lines (91 loc) · 2.67 KB
/
config.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
{
"vault_path":"/home/user/Desktop/vault",
"redis":{
"host":"localhost",
"port":6379
},
"sources":[
{
"name":"Local EML Ingress",
"enabled":true,
"type":"local",
"recursive": true,
"delete_original":false,
"path":"/home/user/Desktop/eml_ingress"
},
{
"name":"IMAP Ingress",
"server":"imap.gmail.com",
"enabled":false,
"type":"imap",
"period":5,
"target_folder":"Inbox",
"username":"",
"password":""
},
{
"name":"gmail.com Ingress",
"enabled":false,
"type":"gmail",
"period":5,
"server":"imap.gmail.com",
"target_folder":"INBOX",
"key_file":"/home/user/path/gauth_0.json",
"token_file":"/home/user/path/gtoken_0.json"
}
],
"operators": [
{
"enabled":false,
"name": "Obsidian Markdown Operator",
"description": "parsers eml reports into markdown templates, meant for viewing with obsidian.md",
"template_dir":""
}
],
"services" : [
{
"enabled": false,
"type": "hybrid_analysis",
"name":"Hybrid Analysis Service",
"description":"Checks all executable attachments with Hybrid Analysis",
"api_key":""
},
{
"enabled":false,
"type" : "external",
"target": "ip",
"command" : "curl ipinfo.io/{ip}",
"schedule": "0",
"name" : "IPinfo analysis",
"description" : "calls out to <external_service_name> to perform analysis, returning a json result"
},
{
"type" : "eml_parser",
"enabled": true,
"name" : "EML Parser Service",
"description" : "EML Parser, parses out EML body contents",
"properties" : {
"property1" : "value1",
"property2" : "value2"
}
}
],
"plugins":[
{
"enabled":false,
"type":"api_server",
"port":4040,
"host":"127.0.0.1",
"name":"EMLHound REST API",
"description":"REST API for interacting with EMLHound via the command line"
},
{
"enabled":false,
"type":"webserver",
"port":8080,
"host":"127.0.0.1",
"name":"EMLHound Web Server",
"description":"Web Server interacting with EMLHound via the browser"
}
]
}