check_threats
Monitor live network traffic and identify malicious IPs by cross-referencing the URLhaus blacklist using a specified network interface and capture duration.
Instructions
Capture live traffic and check IPs against URLhaus blacklist
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| duration | No | Capture duration in seconds | |
| interface | No | Network interface to capture from (e.g., eth0, en0) | en0 |