ahnlab-tip-smishing-urls
Fetch smishing URLs for the specified date range from the AhnLab TIP service.
ahnlab-tip-smishing-urls [profile=PROFILE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss] [order=ORDER]
- profile=PROFILE
- Optional. AhnLab TIP connect profile code
- duration=NUM{mon|w|d|h|m|s}
- Optional. Scan only recent data. You should use d(day) or mon(month) time unit. For example,
7dmeans data from 7 days earlier. - from=yyyyMMddHHmmss
- Optional. Start date (yyyyMMdd)
- to=yyyyMMddHHmmss
- Optional. End date (yyyyMMdd)
- order=ORDER
- Optional. Sort order (asc or desc, default: desc)
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| _time | Date | Time | Feed date |
| profile | String | Connect profile | AhnLab TIP connect profile code |
| id | String | ID | Smishing message ID |
| msg | String | Message | Smishing message content |
| first_seen | Date | First seen | First detection time |
| analysis_time | Date | Analysis time | Analysis time |
| urls | List | URLs | List of URLs extracted from the smishing message |