GreyNoise Dashboard - ecstatic-nobel/OSweep GitHub Wiki

  1. Manually download data feed (one-time only)
| greyNoise feed
  1. Switch to the GreyNoise dashboard in the OSweep™ app.
  2. Add the list of IOCs to the 'Domain, IP, Scanner Name (+)' textbox.
  3. Select whether the results will be grouped and how from the dropdowns.
  4. Click 'Submit'.

GreyNoise - Dashboard

GreyNoise - Adhoc

| greynoise <IOCs>
| fillnull value="-" 
| search NOT "last updated"="-" 
| dedup category confidence "last updated" name ip intention "first seen" datacenter tor "rdns parent" link org os asn rdns
| table category confidence "last updated" name ip intention "first seen" datacenter tor "rdns parent" link org os asn rdns
| sort - "Last Updated"
⚠️ **GitHub.com Fallback** ⚠️