analyzer: hunterhow
query: ...
api_key: ...
start_time: ...
end_time: ...
Name | Type | Required? | Default | Desc. |
---|---|---|---|---|
query | String | Yes | Search query | |
start_time | Date | Yes | ||
end_time | Date | Yes | ||
api_key | String | No | ENV[ā€¯HUNTERHOW_API_KEY"] | API key |
The analyzer uses Hunter How API and https://api.hunter.how/search
API endpoint to search.
IP addresses matched with a query are treated as artifacts.
This rule outputs the following type of artifacts.
Mihari loads your API key via environment variable HUNTERHOW_API_KEY
by default.