Tools
Exactly what the server advertised in the scan completed . Effects and capabilities are classified by Squatch from each tool's metadata. Squatch never runs tools. Compared with the previous scan: 0 new, 2 changed.
- Effect: Read 11
Showing 11 of 11 tools
| Details | ||
|---|---|---|
| describe_taxonomy List the values Rösti uses for IOC types, IOC tags (with descriptions), IOC categories and export formats, and explain the false-positive r… | Effect: Read | |
| find_related_reports Find other Rösti reports that share IOCs with one report, most shared IOCs first, with the shared values. | Effect: Read | |
| get_export_link Get a download link for one report export, e.g. CSV or MISP. The link is signed and expires after 15 minutes; it is meant to be opened by … | Effect: Read | |
| get_report Get one Rösti report: metadata, MITRE ATT&CK ids, CVEs, available export formats, and how many of its IOCs there are per type and per tag. … | Effect: Read | |
| get_yara_rules Get the YARA rules published with one Rösti report, with their full source. | Effect: Read | |
| list_report_iocs List the IOCs of one Rösti report, optionally filtered by type, tag, category or text. IOCs with the same entity_ref belong together, e.g.… | Effect: Read | |
| list_sources List the publishers whose reports Rösti collects (vendor blogs, CERTs, researchers), with report counts, the newest report date and whether… | Effect: Read | |
| lookup_iocChanged Check whether one IOC (indicator of compromise) appears in Rösti's threat-intelligence reports. A defanged value (hxxps://evil[.]com, 1.2.… | Effect: Read | |
| lookup_iocsChanged Check many IOCs (indicators of compromise) at once against Rösti's threat-intelligence reports. Defanged values (hxxps://evil[.]com, 1.2.3… | Effect: Read | |
| search_iocs Search IOCs across all Rösti reports by text, type, tag, category and creation time. Without filters, lists IOCs from all reports. Each IO… | Effect: Read | |
| search_reports Search Rösti's threat-intelligence reports by text, source, CVE, MITRE ATT&CK id and publication date. Returns report summaries: title, da… | Effect: Read |