GreyNoise Dashboard
- Manually download data feed (one-time only)
| greyNoise feed
- Switch to the GreyNoise dashboard in the OSweep™ app.
- Add the list of IOCs to the 'Domain, IP, Scanner Name (+)' textbox.
- Select whether the results will be grouped and how from the dropdowns.
- Click 'Submit'.
GreyNoise - Adhoc
| greynoise <IOCs>
| fillnull value="-"
| search NOT "last updated"="-"
| dedup category confidence "last updated" name ip intention "first seen" datacenter tor "rdns parent" link org os asn rdns
| table category confidence "last updated" name ip intention "first seen" datacenter tor "rdns parent" link org os asn rdns
| sort - "Last Updated"