From the course: Complete Guide to Microsoft Copilot for Security: Empower and Protect the Security Operations Center (SOC) by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

11.3 Use case: Shodan plugin

11.3 Use case: Shodan plugin - Microsoft Security Copilot Tutorial

From the course: Complete Guide to Microsoft Copilot for Security: Empower and Protect the Security Operations Center (SOC) by Microsoft Press

Start my 1-month free trial Buy for my team

11.3 Use case: Shodan plugin

“

- [Instructor] So now you've seen building your own custom plugin for Copilot for Security, as well as calling out to an API with a plugin that's already built in. These were to be able to get information without having to actually go to these dangerous sites, gets those enrichment, that's insights that Copilot for Security can gather, and then build that into your investigation. So now we're going to look at another great use case or great plugin for that, and that is around Shodan. So this is the Shodan InternetDB, and we're going to actually just toggle this on. But I'll show you what that YAML file looks like in the background. So if I go to the Shodan.yaml that actually this calls, you could see it's relatively simple. It's about a search engine scanning the entirety of the internet for connected devices, and it has a open API spec URL. So it's calling out to a GitHub repository to be able to look for that information. And if I go to that GitHub user content, you can see more…

Contents