kingfisher/data/rules/thingsboard.yml
2025-08-16 20:23:27 -07:00

45 lines
No EOL
1.6 KiB
YAML

rules:
- name: ThingsBoard Access Token
id: kingfisher.thingsboard.1
pattern: |
(?x)
thingsboard\.cloud/api/v1/
([a-z0-9]{20})
confidence: medium
min_entropy: 3.0
examples:
- http://thingsboard.cloud/api/v1/354u1g321kcqc1oad3w7/telemetry
- https://thingsboard.cloud/api/v1/354u1g321kcqc1oad3w7/telemetry
- coap://coap.thingsboard.cloud/api/v1/354u1g321kcqc1oad3w7/telemetry
references:
- https://thingsboard.io/docs/paas/reference/http-api/
- https://thingsboard.io/docs/paas/reference/coap-api/
- name: ThingsBoard Provision Device Key
id: kingfisher.thingsboard.2
pattern: |
(?x)
"provisionDeviceKey"\s*:\s*"
([a-z0-9]{20})
"
confidence: medium
min_entropy: 3.0
examples:
- '"{"deviceName": "DEVICE_NAME", "provisionDeviceKey": "s2s1gfcuatgbi61n8h5s", "provisionDeviceSecret": "xbzsovaw9ix4qfhi14an"}"'
references:
- https://thingsboard.io/docs/paas/reference/http-api/
- https://thingsboard.io/docs/paas/user-guide/device-provisioning/
- name: ThingsBoard Provision Device Secret
id: kingfisher.thingsboard.3
pattern: |
(?x)
"provisionDeviceSecret"\s*:\s*"
([a-z0-9]{20})
"
confidence: medium
min_entropy: 3.0
examples:
- '"{"deviceName": "DEVICE_NAME", "provisionDeviceKey": "s2s1gfcuatgbi61n8h5s", "provisionDeviceSecret": "xbzsovaw9ix4qfhi14an"}"'
references:
- https://thingsboard.io/docs/paas/reference/http-api/
- https://thingsboard.io/docs/paas/user-guide/device-provisioning/