If someone need, i've added custom action for Exposure Iseclab Search.
First by domain name, second by ipaddress.
Feel free to change/modify/ignore everithing.
Regards
{
"displayName": "Exposure Search By Domain",
"cssClasses": [
"domain",
"alias-host",
"alias.host",
"domain.dst",
"domain-dst"
],
"description": "",
"type": "UAP.common.contextmenu.actions.URLContextAction",
"version": "1",
"modules": [
"investigation"
],
"local": "false",
"groupName": "externalLookupGroup",
"urlFormat": "http://exposure.iseclab.org/search/?q={0}",
"disabled": "",
"id": "exposureSearch",
"moduleClasses": [
"UAP.investigation.navigate.view.NavigationPanel",
"UAP.investigation.events.view.EventGrid"
],
"openInNewTab": "true",
"order": "26"
}
{
"displayName": "Exposure Search By IP",
"cssClasses": [
"ip-src",
"ip-dst",
"ip.src",
"ip.dst",
"ipv6-src",
"ipv6-dst",
"ipv6.src",
"ipv6.dst",
"orig_ip"
],
"description": "",
"type": "UAP.common.contextmenu.actions.URLContextAction",
"version": "1",
"modules": [
"investigation"
],
"local": "false",
"groupName": "externalLookupGroup",
"urlFormat": "http://exposure.iseclab.org/detection/ip?ip={0}",
"disabled": "",
"id": "exposureSearchip",
"moduleClasses": [
"UAP.investigation.navigate.view.NavigationPanel",
"UAP.investigation.events.view.EventGrid"
],
"openInNewTab": "true",
"order": "27"
}
