ahnlab-tip-c2-urls
Fetch C2 URLs for the specified date range from the AhnLab TIP service.
ahnlab-tip-c2-urls [profile=PROFILE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss] [order=ORDER]
- profile=PROFILE
- Optional. AhnLab TIP connect profile code
- duration=NUM{mon|w|d|h|m|s}
- Optional. Scan only recent data. You should use d(day) or mon(month) time unit. For example,
7dmeans data from 7 days earlier. - from=yyyyMMddHHmmss
- Optional. Start date (yyyyMMdd)
- to=yyyyMMddHHmmss
- Optional. End date (yyyyMMdd)
- order=ORDER
- Optional. Sort order (asc or desc, default: desc)
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| _time | Date | Time | Feed date |
| profile | String | Connect profile | AhnLab TIP connect profile code |
| url | String | URL | C2 URL |
| signature | String | Signature | Associated malware name |
| sha256 | String | SHA256 | SHA256 hash of associated malware |
| collected_time | Date | Collected time | Collection time |