From 9a6ad6df607e85fdc624b09b8a7d43137f4ad15c Mon Sep 17 00:00:00 2001 From: AnshSinghal Date: Wed, 2 Apr 2025 13:59:55 +0000 Subject: [PATCH 1/2] bbot --- docs/IntelOwl/usage.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/IntelOwl/usage.md b/docs/IntelOwl/usage.md index ad41e90..45b9296 100644 --- a/docs/IntelOwl/usage.md +++ b/docs/IntelOwl/usage.md @@ -259,6 +259,7 @@ The following is the list of the available analyzers you can run out-of-the-box. - `UltraDNS_Malicious_Detector`: Scan if a DNS is marked malicious by [UltraDNS](https://vercara.com/ultra-dns-public). - `IPQuery`: [IPQuery](https://ipquery.io/) aims to provide a straightforward and simplistic API for working with IP addresses. - `Mullvad_DNS`: [Mullvad_DNS](https://github.com/mullvad/dns-blocklists) is an analyzer that queries Mullvad's DNS-over-HTTPS service (using the "base" endpoint) to check a domain's DNS records. It supports two modes: `query`: returns raw DNS answer data. `malicious`: interprets an NXDOMAIN (rcode==3) as the domain being blocked (i.e., malicious). +- `BBOT`: [BBOT](https://github.com/blacklanternsecurity/bbot) (Bighuge BLS Open Threat) domain/URL scanner that leverages BBOT's Python library to perform scans with configurable modules and presets. ##### Generic analyzers (email, phone number, etc.; anything really) From c8471a2546fa74aa02bc724a74c6b49d250d169c Mon Sep 17 00:00:00 2001 From: AnshSinghal Date: Wed, 2 Apr 2025 14:22:32 +0000 Subject: [PATCH 2/2] updated docs for bbot --- docs/IntelOwl/usage.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/IntelOwl/usage.md b/docs/IntelOwl/usage.md index 45b9296..4fb4b9b 100644 --- a/docs/IntelOwl/usage.md +++ b/docs/IntelOwl/usage.md @@ -259,6 +259,8 @@ The following is the list of the available analyzers you can run out-of-the-box. - `UltraDNS_Malicious_Detector`: Scan if a DNS is marked malicious by [UltraDNS](https://vercara.com/ultra-dns-public). - `IPQuery`: [IPQuery](https://ipquery.io/) aims to provide a straightforward and simplistic API for working with IP addresses. - `Mullvad_DNS`: [Mullvad_DNS](https://github.com/mullvad/dns-blocklists) is an analyzer that queries Mullvad's DNS-over-HTTPS service (using the "base" endpoint) to check a domain's DNS records. It supports two modes: `query`: returns raw DNS answer data. `malicious`: interprets an NXDOMAIN (rcode==3) as the domain being blocked (i.e., malicious). + +_Available from version > 6.3.1_ - `BBOT`: [BBOT](https://github.com/blacklanternsecurity/bbot) (Bighuge BLS Open Threat) domain/URL scanner that leverages BBOT's Python library to perform scans with configurable modules and presets. ##### Generic analyzers (email, phone number, etc.; anything really)