Spur Operation
Spur tracks anonymization services so that you can identify when anonymization services are touching your website, application, or network. The Spur Operation allows analysts to perform quick context lookups for a given IP Address, bringing back anonymization information that can be used to determine if the IOC is a possible threat. The Get Context action enables the automatic enrichment of IP Addresses in ThreatQ, using Spur’s Context API. The API will tell you if the selected IOCs are used by anonymization services, as well as if the tunnels are used by a specific region, or used by a specific threat.
Version
1.0.1Categories
Commercial Intelligence
ThreatQ Supported
Spur Enrichment Action
Spur tracks anonymization services so that you can identify when anonymization services are touching your website, application, or network. The Spur Enrichment Action enables the automatic enrichment of IP Addresses in ThreatQ using Spur’s Context API. The API will tell you if the selected IOCs are used by anonymization services, as well as if the tunnels are used by a specific region, or used by a specific threat.