Adding Shodan to the Action Menu

[M-F-P]

More often than not Shodan is my first stop when checking out IP addresses because it tends to avoid the "false positives" entailed in google and virustotal search results. Modifying the action menu is very easy, with the hardest part consisting of finding the pertinent correct section in the docs. In the interest perhaps of saving someone else a few minutes, here is the process for adding Shodan:

sudo cp -n /opt/so/saltstack/default/salt/soc/files/soc/menu.actions.json /opt/so/saltstack/local/salt/soc/files/soc/menu.actions.json

sudo [text.editor.of.your.choice] /opt/so/saltstack/local/salt/soc/files/soc/menu.actions.json

# inset the following as the second to last line of menu.actions.json:

,{ "name": "Shodan", "description": "Search for this value at Shodan", "icon": "fa-external-link-alt", "target": "_blank","links": [ "https://www.shodan.io/host/{value}" ]}

sudo so-soc-restart

Obviously, this is not rocket science!