kingfisher/data/rules/zohocrm.yml
Mick Grove 7237a931d5 v1.73.0
2026-01-01 22:24:57 -08:00

35 lines
1 KiB
YAML

rules:
- name: Zoho CRM API Access Token
id: kingfisher.zohocrm.1
pattern: |
(?xi)
\b
(
1000\.[a-f0-9]{32}\.[a-f0-9]{32}
)
\b
pattern_requirements:
min_digits: 4
min_entropy: 3.5
confidence: medium
examples:
- 1000.a23f12b4c5d6e7f8901234567890abc1.23d4e5f67890abcdef1234567890abcd
- 1000.123fa4b5c678d90eabcdef1234567890.ab12c3d4e5f6a7890bcd12ef345678ab
references:
- https://www.zoho.com/crm/developer/docs/api/v8/access-refresh.html
- https://www.zoho.com/crm/developer/docs/api/v8/get-users.html
validation:
type: Http
content:
request:
method: GET
url: "https://www.zohoapis.com/crm/v7/users?type=CurrentUser"
headers:
Authorization: "Zoho-oauthtoken {{ TOKEN }}"
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status: [200]
- type: WordMatch
words: ['"users"']