AbuseIPDB API reference. IP reputation and abuse report lookups.
中文简介正在准备中。当前显示原文说明。
AlienVault OTX API reference. Community threat intelligence pulses and indicator lookups.
中文简介正在准备中。当前显示原文说明。
安装前可以查看交给 AI 代理的指令内容。
https://otx.alienvault.com/api/v1
Header: X-OTX-API-KEY: $OTX_API_KEY
# General info
curl -s "https://otx.alienvault.com/api/v1/indicators/IPv4/{ip}/general" \
-H "X-OTX-API-KEY: $OTX_API_KEY"
# Reputation
curl -s "https://otx.alienvault.com/api/v1/indicators/IPv4/{ip}/reputation" \
-H "X-OTX-API-KEY: $OTX_API_KEY"
# Passive DNS
curl -s "https://otx.alienvault.com/api/v1/indicators/IPv4/{ip}/passive_dns" \
-H "X-OTX-API-KEY: $OTX_API_KEY"
# Associated malware
curl -s "https://otx.alienvault.com/api/v1/indicators/IPv4/{ip}/malware" \
-H "X-OTX-API-KEY: $OTX_API_KEY"
curl -s "https://otx.alienvault.com/api/v1/indicators/domain/{domain}/general" \
-H "X-OTX-API-KEY: $OTX_API_KEY"
Sections: /general, /geo, /malware, /url_list, /passive_dns, /whois
curl -s "https://otx.alienvault.com/api/v1/indicators/file/{hash}/general" \
-H "X-OTX-API-KEY: $OTX_API_KEY"
Sections: /general, /analysis
curl -s "https://otx.alienvault.com/api/v1/indicators/url/{url}/general" \
-H "X-OTX-API-KEY: $OTX_API_KEY"
curl -s "https://otx.alienvault.com/api/v1/search/pulses?q={query}" \
-H "X-OTX-API-KEY: $OTX_API_KEY"
pulse_info.count — number of pulses referencing this indicatorpulse_info.pulses[] — pulse details (name, description, tags, TLP, created)reputation — community reputation scorevalidation[] — validation results from OTXpassive_dns[] — historical DNS resolutionsOTX provides community-sourced intelligence. High pulse count = widely reported indicator. Useful for:
indicator: <value>
type: <ip|domain|hash|url>
pulse_count: <number>
reputation: <score>
key_pulses:
- name: <pulse name>
tags: [<tags>]
created: <date>
related_indicators: [<list>]
passive_dns: [<domain/IP resolutions>]
verdict: known-malicious|suspicious|clean|unknown
还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
AbuseIPDB API reference. IP reputation and abuse report lookups.
中文简介正在准备中。当前显示原文说明。
Analysis of Competing Hypotheses — structured technique for evaluating multiple explanations against evidence. Use when facing ambiguous attribution or multiple plausible scenarios. Prefers graded evidence items from /quality-of-information-check and runs that skill first when handed raw URLs or text. Runs on ungraded evidence when asked, labelled as such, unweighted, and capped at Moderate confidence.
中文简介正在准备中。当前显示原文说明。
Use when documenting a named campaign across time and victims, the user asks to start or update a campaign record, or another skill identified a multi-incident cluster that warrants formal tracking. Provides the template (timeline, attribution, victimology, attack chain, Diamond Model mapping, IOC clusters) and the lifecycle from active to historical.
中文简介正在准备中。当前显示原文说明。
Use when the user asks about carding, BIN attacks, payment-card breach markets, fullz/CVV2 trade, autoshops (BidenCash, Brian's Club, Russianmarket, B1ack's Stash), or financial-fraud TTPs. Self-updating knowledge cell.
中文简介正在准备中。当前显示原文说明。
Censys API v2 reference. Host reconnaissance and certificate data.
中文简介正在准备中。当前显示原文说明。
Use when the user asks about Chinese state-sponsored cyber operations or specific PRC-aligned actors (APT41, Volt Typhoon, Mustang Panda, APT10, APT31, Salt Typhoon, etc.), MSS/PLA-attributed campaigns, or PRC sector targeting. Self-updating knowledge cell.
中文简介正在准备中。当前显示原文说明。