URLscan and/or URLhaus integration

[Eddy]

Hi guys, is possible integrate https://urlscan.io/docs/api/ or https://urlhaus-api.abuse.ch/ ?
please help

[Manuel Alejandro Roldan Mella]

Hi Eddy,

You can integrate practically any API with Wazuh. You just need to:
 
- A custom integration in ossec.conf

- Develop an integration script

- Develop custom rules.

I will share with you an official blog post that explains how to integrate urlhaus.io

I hope you find it helpful.

If you need help with the integration don't hesitate to ask us. We are glad to help.

Regards,

[Eddy]

Hi Manuel, thanks for you response. The blog post helped me a lot.