# Sample Cortex application.conf file

## SECRET KEY
#
# The secret key is used to secure cryptographic functions.
#
# IMPORTANT: If you deploy your application to several  instances,  make
# sure to use the same key.
#play.crypto.secret="***CHANGEME***"

## ANALYZERS
#
# This section holds the configuration of the analyzers.
#
# Please note that MISP expansion modules have  their  separate  section
# (see MISP EXPANSION MODULES below).
#
# NOTE: you are highly advised to remove the configuration parts related
# to unneeded/unused analyzers.
#
# NOTE: if you don't need an analyzer, please remove  the  corresponding
# directory. For example, if you don't use 'MaxMind', remove:
# /path/to/Cortex-Analyzers/analyzers/MaxMind
#
# WARNING: there is overlap between Cortex  native  analyzers  and  MISP
# expansion modules. We  highly  advise  you  to  use  native  analyzers
# whenever possible.
#
# WARNING: DO NOT CONFIGURE A CORTEX ANALYZER AND A MISP MODULE FOR  THE
# SAME SERVICE.
analyzer {
  path = "path/to/Cortex-Analyzers/analyzers"
 }
## MISP EXPANSION MODULES
#
# This section holds the configuration of  the  MISP  expansion  modules
# which Cortex can use as analyzers. They are disabled  by  default.  If
# you need to enable them, change the value of the  'enabled'  parameter
# WARNING: there is overlap between Cortex  native  analyzers  and  MISP
# expansion modules. We  highly  advise  you  to  use  native  analyzers
# whenever possible.
#
# WARNING: DO NOT CONFIGURE A CORTEX ANALYZER AND A MISP MODULE FOR  THE
# SAME SERVICE.
misp.modules {
  enabled = true

  # Refer to https://github.com/MISP/misp-modules#expansion-modules  for
  # the configuration of the MISP expansion modules.
  config {

    shodan {
      apikey = ""
    }

    eupi {
      #apikey = ""
      #url = ""
}

    passivetotal {
      #username = ""
      #api_key = ""
    }

    dns {
      nameserver = "127.0.0.1"
    }

    whois {
      #server = ""
      #port = ""
    }

    sourcecache {
      #archivepath = ""
    }
geoip_country {
    }

    circl_passivessl {
      #username = ""
      #password = ""
    }

    iprep {
      #apikey = ""
    }

    countrycode {
    }

    cve {
    }

    virustotal {
      #apikey = ""
ipasn {
      #host = ""
      #port = ""
      #db = ""
    }

    circl_passivedns {
      #username = ""
      #password = ""
    }

    vmray_submit {
      #apikey = ""
      #url = ""
      #shareable = ""
wiki {
    }

    domaintools {
      #username = ""
      #api_key = ""
    }

    reversedns {
      #nameserver = ""
    }

    threatminer {
    }

    asn_history {
      #host = ""
      #port = ""
      #db = ""
    }
http.port=9001
misp.modules.enabled = true
misp.modules {
  enabled = true

  config {

    shodan {
      apikey = ""
    }

    dns {
      nameserver = "127.0.0.1"
    }

  }
}
# It's the end my friend. Happy hunting!
# Secret key
# ~~~~~
# The secret key is used to secure cryptographics functions.
# If you deploy your application to several instances be sure to use the same key!
play.crypto.secret="