mirror of
https://github.com/zulip/zulip.git
synced 2026-07-12 21:04:41 +08:00
f1c9d9c2fe
This commit fixes the Thinkst Canary integration which - based on the schema in upstream documentation - incorrectly assumed that some fields would always be sent, which meant that the integration would fail. In addition, this commit adjusts support for canarytokens to only support the canarytoken schema with Thinkst Canaries (not Thinkst's canarytokens.org). Signed-off-by: David Wood <david@davidtw.co>
49 lines
962 B
JSON
49 lines
962 B
JSON
{
|
|
"Token": "ew5n8gqtb82m4uegrttarn2zu",
|
|
"Intro": "A Remote Web Image Canarytoken has been triggered over web-image by the source IP 1.1.1.1.",
|
|
"Description": "Remote Web Image",
|
|
"Triggered": 37,
|
|
"AdditionalDetails": [
|
|
[
|
|
"Accept",
|
|
"image/webp,*/*"
|
|
],
|
|
[
|
|
"Accept-Encoding",
|
|
"gzip, deflate"
|
|
],
|
|
[
|
|
"Accept-Language",
|
|
"en-US,en;q=0.5"
|
|
],
|
|
[
|
|
"Background Context",
|
|
"You have had 12 incidents from 1.1.1.1 previously."
|
|
],
|
|
[
|
|
"Cache-Control",
|
|
"max-age=0"
|
|
],
|
|
[
|
|
"Connection",
|
|
"keep-alive"
|
|
],
|
|
[
|
|
"Dnt",
|
|
"1"
|
|
],
|
|
[
|
|
"Dst Port",
|
|
80
|
|
],
|
|
[
|
|
"User-Agent",
|
|
"Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0"
|
|
]
|
|
],
|
|
"Timestamp": "2020-07-20 16:33:12 (UTC)",
|
|
"Reminder": "test image",
|
|
"IncidentHash": "533395067f6d655cd19384bc6991cc0f",
|
|
"AlertType": "CanarytokenIncident"
|
|
}
|