{"resources":{"shodan":{"id":"shodan","name":"shodan","fields":{"apiPlan":{"name":"apiPlan","type":"\u001bshodan.apiPlan","title":"Shodan Search Engine API plan information","desc":"API plan attached to the connected account, describing the entitlements and remaining quota available to queries: the plan name, whether the plan is active (unlocked), the scan-credit balance, whether Telnet banner grabbing is permitted, and how many IPs the plan is allowed to monitor. Query this to confirm an account holds the credits and permissions a scan depends on before it runs.","provider":"go.mondoo.com/mql/v13/providers/shodan","is_implicit_resource":true},"domain":{"name":"domain","type":"\u001bshodan.domain","title":"Shodan domain information","desc":"Shodan's DNS and reconnaissance view of a domain, selected by `name` (for example `shodan.domain(name: \"example.com\")`). Covers the tags Shodan applies to the domain, the discovered subdomains, the DNS NS records Shodan has observed, and the hosts the domain and its subdomains resolve to, useful for mapping a domain's external attack surface.","provider":"go.mondoo.com/mql/v13/providers/shodan","is_implicit_resource":true},"host":{"name":"host","type":"\u001bshodan.host","title":"Shodan host information","desc":"Everything Shodan knows about a single internet-reachable host, selected by `ip` (e.g., `shodan.host(ip: \"1.2.3.4\")`). Covers ownership (ASN, ISP, organization), reverse-DNS hostnames, the open-port list, and the per-banner service inventory reached through `services`, along with geolocation and Shodan's tag set. The tag set drives the `isCloud`, `isCdn`, `isVpn`, `isTor`, `isProxy`, and `isInfrastructure` predicates for classifying the host's hosting environment. Host-level vulnerabilities are exposed through `vulns` with CVSS and severity per CVE, and per-banner findings are available on each service.","provider":"go.mondoo.com/mql/v13/providers/shodan","is_implicit_resource":true},"nsrecord":{"name":"nsrecord","type":"\u001bshodan.nsrecord","title":"Shodan Search Engine DNS record","desc":"DNS record that Shodan observed for a domain through its domain intelligence data. Each record carries the subdomain it belongs to, its record type (A, AAAA, CNAME, MX, NS, TXT, SOA, and others), the value it points to, and when Shodan last saw it. The A and AAAA records supply the IP addresses the domain and its subdomains resolve to.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/shodan","is_implicit_resource":true},"profile":{"name":"profile","type":"\u001bshodan.profile","title":"Shodan Search Engine account","desc":"Account that the connected API key belongs to. Confirms which identity is querying Shodan, whether it holds a paid membership, and how many search credits remain before queries are throttled or blocked, which matters when the account is shared by automation.","provider":"go.mondoo.com/mql/v13/providers/shodan","is_implicit_resource":true}},"title":"Shodan Search Engine","desc":"Root of the Shodan internet-intelligence data this provider exposes. Shodan continuously indexes internet-reachable hosts, cataloging their open ports, service banners, TLS posture, and known vulnerabilities. Query `shodan.host(ip: \"1.2.3.4\")` for a single host's exposure, `shodan.domain(name: \"example.com\")` for a domain's subdomains and DNS records, `shodan.profile` for the connected account, and `shodan.apiPlan` for the plan's scan-credit and monitored-IP limits.","min_provider_version":"11.0.0","provider":"go.mondoo.com/mql/v13/providers/shodan"},"shodan.apiPlan":{"id":"shodan.apiPlan","name":"shodan.apiPlan","fields":{"monitoredIps":{"name":"monitoredIps","type":"\u0005","is_mandatory":true,"title":"Number of monitored IPs","provider":"go.mondoo.com/mql/v13/providers/shodan"},"plan":{"name":"plan","type":"\u0007","is_mandatory":true,"title":"Name of the plan","provider":"go.mondoo.com/mql/v13/providers/shodan"},"scanCredits":{"name":"scanCredits","type":"\u0005","is_mandatory":true,"title":"Number of scan credits","provider":"go.mondoo.com/mql/v13/providers/shodan"},"telnet":{"name":"telnet","type":"\u0004","is_mandatory":true,"title":"Whether Telnet is allowed","provider":"go.mondoo.com/mql/v13/providers/shodan"},"unlocked":{"name":"unlocked","type":"\u0004","is_mandatory":true,"title":"Whether the plan is active","provider":"go.mondoo.com/mql/v13/providers/shodan"},"unlockedLeft":{"name":"unlockedLeft","type":"\u0005","is_mandatory":true,"title":"Number of scan credits left","provider":"go.mondoo.com/mql/v13/providers/shodan"}},"title":"Shodan Search Engine API plan information","desc":"API plan attached to the connected account, describing the entitlements and remaining quota available to queries: the plan name, whether the plan is active (unlocked), the scan-credit balance, whether Telnet banner grabbing is permitted, and how many IPs the plan is allowed to monitor. Query this to confirm an account holds the credits and permissions a scan depends on before it runs.","min_provider_version":"11.0.0","defaults":"plan","provider":"go.mondoo.com/mql/v13/providers/shodan"},"shodan.domain":{"id":"shodan.domain","name":"shodan.domain","fields":{"hosts":{"name":"hosts","type":"\u0019\u001bshodan.host","title":"Hosts the domain and its subdomains resolve to, from A and AAAA records","min_provider_version":"13.1.2","provider":"go.mondoo.com/mql/v13/providers/shodan"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Domain name","provider":"go.mondoo.com/mql/v13/providers/shodan"},"nsrecords":{"name":"nsrecords","type":"\u0019\u001bshodan.nsrecord","title":"DNS NS records","provider":"go.mondoo.com/mql/v13/providers/shodan"},"subdomains":{"name":"subdomains","type":"\u0019\u0007","title":"List of subdomains","provider":"go.mondoo.com/mql/v13/providers/shodan"},"tags":{"name":"tags","type":"\u0019\u0007","title":"Domain tags","provider":"go.mondoo.com/mql/v13/providers/shodan"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"Shodan domain information","desc":"Shodan's DNS and reconnaissance view of a domain, selected by `name` (for example `shodan.domain(name: \"example.com\")`). Covers the tags Shodan applies to the domain, the discovered subdomains, the DNS NS records Shodan has observed, and the hosts the domain and its subdomains resolve to, useful for mapping a domain's external attack surface.","min_provider_version":"11.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/shodan"},"shodan.host":{"id":"shodan.host","name":"shodan.host","fields":{"asn":{"name":"asn","type":"\u0007","title":"Host ASN","provider":"go.mondoo.com/mql/v13/providers/shodan"},"cert":{"name":"cert","type":"\u001bshodan.host.cert","title":"X.509 certificate parsed from a Shodan SSL/TLS service banner","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/shodan","is_implicit_resource":true},"city":{"name":"city","type":"\u0007","title":"City","provider":"go.mondoo.com/mql/v13/providers/shodan"},"country":{"name":"country","type":"\u0007","title":"Country","provider":"go.mondoo.com/mql/v13/providers/shodan"},"countryCode":{"name":"countryCode","type":"\u0007","title":"2-letter country code (ISO 3166-1 alpha-2)","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"hostnames":{"name":"hostnames","type":"\u0019\u0007","title":"List of hostnames assigned to the IP","provider":"go.mondoo.com/mql/v13/providers/shodan"},"ip":{"name":"ip","type":"\u0007","is_mandatory":true,"title":"Host IP","provider":"go.mondoo.com/mql/v13/providers/shodan"},"isCdn":{"name":"isCdn","type":"\u0004","title":"True if Shodan tags identify this IP as a CDN edge (e.g. Cloudflare, Fastly)","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"isCloud":{"name":"isCloud","type":"\u0004","title":"True if Shodan tags identify this IP as cloud-hosted (e.g. AWS, Azure, GCP)","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"isInfrastructure":{"name":"isInfrastructure","type":"\u0004","title":"True if any Shodan infrastructure tag matches this IP","desc":"Matches cloud, CDN, VPN, proxy, or Tor. Broader-than-datacenter heuristic for spotting non-residential traffic origins.","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"isProxy":{"name":"isProxy","type":"\u0004","title":"True if Shodan tags identify this IP as an open/anonymous proxy","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"isTor":{"name":"isTor","type":"\u0004","title":"True if Shodan tags identify this IP as a Tor exit/relay node","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"isVpn":{"name":"isVpn","type":"\u0004","title":"True if Shodan tags identify this IP as a VPN endpoint","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"isp":{"name":"isp","type":"\u0007","title":"ISP that owns the IP","provider":"go.mondoo.com/mql/v13/providers/shodan"},"lastUpdate":{"name":"lastUpdate","type":"\t","title":"Last time Shodan updated information for this host","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"latitude":{"name":"latitude","type":"\u0006","title":"Latitude of the geolocation","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"longitude":{"name":"longitude","type":"\u0006","title":"Longitude of the geolocation","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"org":{"name":"org","type":"\u0007","title":"Organization that owns the IP","provider":"go.mondoo.com/mql/v13/providers/shodan"},"os":{"name":"os","type":"\u0007","title":"Host Operating System","provider":"go.mondoo.com/mql/v13/providers/shodan"},"ports":{"name":"ports","type":"\u0019\u0005","title":"Open ports","provider":"go.mondoo.com/mql/v13/providers/shodan"},"postalCode":{"name":"postalCode","type":"\u0007","title":"Postal code","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"regionCode":{"name":"regionCode","type":"\u0007","title":"Region code","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"service":{"name":"service","type":"\u001bshodan.host.service","title":"Service banner observed by Shodan on a specific host port","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/shodan","is_implicit_resource":true},"services":{"name":"services","type":"\u0019\u001bshodan.host.service","title":"Service banners observed on this host","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"},"tags":{"name":"tags","type":"\u0019\u0007","title":"Host tags","provider":"go.mondoo.com/mql/v13/providers/shodan"},"tls":{"name":"tls","type":"\u001bshodan.host.tls","title":"SSL/TLS posture observed on a single Shodan service banner","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/shodan","is_implicit_resource":true},"vulnerabilities":{"name":"vulnerabilities","type":"\u0019\u0007","title":"Host-level CVE IDs without CVSS metadata","desc":"Deprecated in favor of `vulns`. CVE IDs sourced from the host-level `vulns` map Shodan returns alongside the host record (flat list, no CVSS metadata).","provider":"go.mondoo.com/mql/v13/providers/shodan","maturity":"deprecated"},"vulnerability":{"name":"vulnerability","type":"\u001bshodan.host.vulnerability","title":"Vulnerability detail from a Shodan host service banner","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/shodan","is_implicit_resource":true},"vulns":{"name":"vulns","type":"\u0019\u001bshodan.host.vulnerability","title":"Detailed vulnerabilities aggregated from each service banner's `vulns` map","desc":"The highest CVSS score across banners reporting the same CVE is used. May diverge from `vulnerabilities` because the two come from different parts of the Shodan response.","min_provider_version":"13.0.7","provider":"go.mondoo.com/mql/v13/providers/shodan"}},"init":{"args":[{"name":"ip","type":"\u0007"}]},"title":"Shodan host information","desc":"Everything Shodan knows about a single internet-reachable host, selected by `ip` (e.g., `shodan.host(ip: \"1.2.3.4\")`). Covers ownership (ASN, ISP, organization), reverse-DNS hostnames, the open-port list, and the per-banner service inventory reached through `services`, along with geolocation and Shodan's tag set. The tag set drives the `isCloud`, `isCdn`, `isVpn`, `isTor`, `isProxy`, and `isInfrastructure` predicates for classifying the host's hosting environment. Host-level vulnerabilities are exposed through `vulns` with CVSS and severity per CVE, and per-banner findings are available on each service.","min_provider_version":"11.0.0","defaults":"ip","provider":"go.mondoo.com/mql/v13/providers/shodan"},"shodan.host.cert":{"id":"shodan.host.cert","name":"shodan.host.cert","fields":{"expired":{"name":"expired","type":"\u0004","is_mandatory":true,"title":"True if the certificate is past its \"expires\" timestamp","provider":"go.mondoo.com/mql/v13/providers/shodan"},"expires":{"name":"expires","type":"\t","is_mandatory":true,"title":"Time the certificate expires","provider":"go.mondoo.com/mql/v13/providers/shodan"},"fingerprintSha1":{"name":"fingerprintSha1","type":"\u0007","is_mandatory":true,"title":"SHA1 fingerprint of the certificate","provider":"go.mondoo.com/mql/v13/providers/shodan"},"fingerprintSha256":{"name":"fingerprintSha256","type":"\u0007","is_mandatory":true,"title":"SHA256 fingerprint of the certificate","provider":"go.mondoo.com/mql/v13/providers/shodan"},"issued":{"name":"issued","type":"\t","is_mandatory":true,"title":"Time the certificate was issued","provider":"go.mondoo.com/mql/v13/providers/shodan"},"issuerCN":{"name":"issuerCN","type":"\u0007","is_mandatory":true,"title":"Issuer Common Name (CN)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"issuerO":{"name":"issuerO","type":"\u0007","is_mandatory":true,"title":"Issuer Organization (O)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"pubkeyBits":{"name":"pubkeyBits","type":"\u0005","is_mandatory":true,"title":"Public key length in bits","provider":"go.mondoo.com/mql/v13/providers/shodan"},"pubkeyType":{"name":"pubkeyType","type":"\u0007","is_mandatory":true,"title":"Public key type (e.g. rsa, ecdsa)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"selfSigned":{"name":"selfSigned","type":"\u0004","is_mandatory":true,"title":"True if the certificate's subject CN matches its issuer CN (likely self-signed)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"serial":{"name":"serial","type":"\u0007","is_mandatory":true,"title":"Certificate serial number","provider":"go.mondoo.com/mql/v13/providers/shodan"},"sigAlg":{"name":"sigAlg","type":"\u0007","is_mandatory":true,"title":"Signature algorithm (e.g. sha256WithRSAEncryption)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"subjectCN":{"name":"subjectCN","type":"\u0007","is_mandatory":true,"title":"Subject Common Name (CN)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"subjectO":{"name":"subjectO","type":"\u0007","is_mandatory":true,"title":"Subject Organization (O)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"Certificate version (e.g. 3 for X.509 v3)","provider":"go.mondoo.com/mql/v13/providers/shodan"}},"title":"X.509 certificate parsed from a Shodan SSL/TLS service banner","private":true,"min_provider_version":"13.0.7","defaults":"subjectCN issuerCN expired","provider":"go.mondoo.com/mql/v13/providers/shodan"},"shodan.host.service":{"id":"shodan.host.service","name":"shodan.host.service","fields":{"cpe":{"name":"cpe","type":"\u0019\u0007","is_mandatory":true,"title":"Common Platform Enumeration (CPE) entries","provider":"go.mondoo.com/mql/v13/providers/shodan"},"data":{"name":"data","type":"\u0007","is_mandatory":true,"title":"Raw banner data returned by the service","provider":"go.mondoo.com/mql/v13/providers/shodan"},"deviceType":{"name":"deviceType","type":"\u0007","is_mandatory":true,"title":"Device type (e.g. webcam, router) reported by Shodan","provider":"go.mondoo.com/mql/v13/providers/shodan"},"hash":{"name":"hash","type":"\u0005","is_mandatory":true,"title":"Hash of the banner data","provider":"go.mondoo.com/mql/v13/providers/shodan"},"hostnames":{"name":"hostnames","type":"\u0019\u0007","is_mandatory":true,"title":"Hostnames associated with the banner","provider":"go.mondoo.com/mql/v13/providers/shodan"},"ip":{"name":"ip","type":"\u0007","is_mandatory":true,"title":"IP of the host this service runs on","provider":"go.mondoo.com/mql/v13/providers/shodan"},"module":{"name":"module","type":"\u0007","is_mandatory":true,"title":"Shodan module that collected the banner (e.g. http, https, ssh)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Port number","provider":"go.mondoo.com/mql/v13/providers/shodan"},"product":{"name":"product","type":"\u0007","is_mandatory":true,"title":"Software product running the service (e.g. nginx, OpenSSH)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"timestamp":{"name":"timestamp","type":"\t","is_mandatory":true,"title":"Timestamp the banner was collected","provider":"go.mondoo.com/mql/v13/providers/shodan"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Page title (HTTP services only)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"tlsBanner":{"name":"tlsBanner","type":"\u001bshodan.host.tls","is_mandatory":true,"title":"SSL/TLS data for the service (null if not present)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"transport":{"name":"transport","type":"\u0007","is_mandatory":true,"title":"Transport protocol (tcp or udp)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Version of the software running the service","provider":"go.mondoo.com/mql/v13/providers/shodan"},"vulnerabilities":{"name":"vulnerabilities","type":"\u0019\u0007","is_mandatory":true,"title":"CVE IDs associated with this banner","desc":"Deprecated in favor of `vulns`.","provider":"go.mondoo.com/mql/v13/providers/shodan","maturity":"deprecated"},"vulns":{"name":"vulns","type":"\u0019\u001bshodan.host.vulnerability","is_mandatory":true,"title":"Detailed vulnerabilities for this banner with CVSS and severity","provider":"go.mondoo.com/mql/v13/providers/shodan"}},"title":"Service banner observed by Shodan on a specific host port","private":true,"min_provider_version":"13.0.7","defaults":"port transport product version","provider":"go.mondoo.com/mql/v13/providers/shodan"},"shodan.host.tls":{"id":"shodan.host.tls","name":"shodan.host.tls","fields":{"alpn":{"name":"alpn","type":"\u0019\u0007","is_mandatory":true,"title":"ALPN protocols advertised by the server (e.g. h2, http/1.1)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"cert":{"name":"cert","type":"\u001bshodan.host.cert","is_mandatory":true,"title":"Server certificate","provider":"go.mondoo.com/mql/v13/providers/shodan"},"cipherBits":{"name":"cipherBits","type":"\u0005","is_mandatory":true,"title":"Cipher key length in bits","provider":"go.mondoo.com/mql/v13/providers/shodan"},"cipherName":{"name":"cipherName","type":"\u0007","is_mandatory":true,"title":"Preferred cipher name negotiated for the SSL connection","provider":"go.mondoo.com/mql/v13/providers/shodan"},"cipherVersion":{"name":"cipherVersion","type":"\u0007","is_mandatory":true,"title":"SSL/TLS version of the preferred cipher","provider":"go.mondoo.com/mql/v13/providers/shodan"},"hasInsecureProtocol":{"name":"hasInsecureProtocol","type":"\u0004","is_mandatory":true,"title":"True if any insecure SSL/TLS version (SSLv2, SSLv3, TLS 1.0, TLS 1.1) is enabled","provider":"go.mondoo.com/mql/v13/providers/shodan"},"hasWeakCipher":{"name":"hasWeakCipher","type":"\u0004","is_mandatory":true,"title":"True if the preferred cipher is considered weak (RC4, DES, 3DES, EXPORT, NULL, anon, MD5, \u003c 128 bits)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"ip":{"name":"ip","type":"\u0007","is_mandatory":true,"title":"IP of the host the SSL/TLS service runs on","provider":"go.mondoo.com/mql/v13/providers/shodan"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Port the SSL/TLS service runs on","provider":"go.mondoo.com/mql/v13/providers/shodan"},"sslv2":{"name":"sslv2","type":"\u0004","is_mandatory":true,"title":"True if the service negotiates SSLv2 (insecure)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"sslv3":{"name":"sslv3","type":"\u0004","is_mandatory":true,"title":"True if the service negotiates SSLv3 (insecure)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"supportedVersions":{"name":"supportedVersions","type":"\u0019\u0007","is_mandatory":true,"title":"List of supported SSL/TLS versions (positive entries from versions)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"tlsv10":{"name":"tlsv10","type":"\u0004","is_mandatory":true,"title":"True if the service negotiates TLS 1.0 (deprecated)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"tlsv11":{"name":"tlsv11","type":"\u0004","is_mandatory":true,"title":"True if the service negotiates TLS 1.1 (deprecated)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"tlsv12":{"name":"tlsv12","type":"\u0004","is_mandatory":true,"title":"True if the service negotiates TLS 1.2","provider":"go.mondoo.com/mql/v13/providers/shodan"},"tlsv13":{"name":"tlsv13","type":"\u0004","is_mandatory":true,"title":"True if the service negotiates TLS 1.3","provider":"go.mondoo.com/mql/v13/providers/shodan"},"versions":{"name":"versions","type":"\u0019\u0007","is_mandatory":true,"title":"List of SSL/TLS versions reported by the service. Negative entries (prefixed \"-\") indicate the version is NOT supported.","provider":"go.mondoo.com/mql/v13/providers/shodan"}},"title":"SSL/TLS posture observed on a single Shodan service banner","private":true,"min_provider_version":"13.0.7","defaults":"ip port","provider":"go.mondoo.com/mql/v13/providers/shodan"},"shodan.host.vulnerability":{"id":"shodan.host.vulnerability","name":"shodan.host.vulnerability","fields":{"cve":{"name":"cve","type":"\u0007","is_mandatory":true,"title":"CVE identifier (e.g. CVE-2021-44228)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"cvss":{"name":"cvss","type":"\u0006","is_mandatory":true,"title":"CVSS base score reported by Shodan, or -1 if not provided","provider":"go.mondoo.com/mql/v13/providers/shodan"},"references":{"name":"references","type":"\u0019\u0007","is_mandatory":true,"title":"Reference URLs (advisories, vendor pages)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"severity":{"name":"severity","type":"\u0007","is_mandatory":true,"title":"Qualitative severity derived from CVSS: critical (\u003e=9.0), high (\u003e=7.0), medium (\u003e=4.0), low (\u003e0), none (=0), unknown (no score)","provider":"go.mondoo.com/mql/v13/providers/shodan"},"summary":{"name":"summary","type":"\u0007","is_mandatory":true,"title":"Description of the vulnerability","provider":"go.mondoo.com/mql/v13/providers/shodan"},"verified":{"name":"verified","type":"\u0004","is_mandatory":true,"title":"Whether the Shodan crawler verified the vulnerability","provider":"go.mondoo.com/mql/v13/providers/shodan"}},"title":"Vulnerability detail from a Shodan host service banner","private":true,"min_provider_version":"13.0.7","defaults":"cve cvss severity","provider":"go.mondoo.com/mql/v13/providers/shodan"},"shodan.nsrecord":{"id":"shodan.nsrecord","name":"shodan.nsrecord","fields":{"domain":{"name":"domain","type":"\u0007","is_mandatory":true,"title":"DNS domain","provider":"go.mondoo.com/mql/v13/providers/shodan"},"lastSeen":{"name":"lastSeen","type":"\t","is_mandatory":true,"title":"Last seen by Shodan","provider":"go.mondoo.com/mql/v13/providers/shodan"},"subdomain":{"name":"subdomain","type":"\u0007","is_mandatory":true,"title":"DNS subdomain","provider":"go.mondoo.com/mql/v13/providers/shodan"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"DNS record type","desc":"One of A, AAAA, CNAME, MX, NS, TXT, SOA, and other DNS record types returned by Shodan.","provider":"go.mondoo.com/mql/v13/providers/shodan"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"DNS record value","provider":"go.mondoo.com/mql/v13/providers/shodan"}},"title":"Shodan Search Engine DNS record","desc":"DNS record that Shodan observed for a domain through its domain intelligence data. Each record carries the subdomain it belongs to, its record type (A, AAAA, CNAME, MX, NS, TXT, SOA, and others), the value it points to, and when Shodan last saw it. The A and AAAA records supply the IP addresses the domain and its subdomains resolve to.","private":true,"min_provider_version":"11.0.0","defaults":"domain subdomain type","provider":"go.mondoo.com/mql/v13/providers/shodan"},"shodan.profile":{"id":"shodan.profile","name":"shodan.profile","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Profile creation time","provider":"go.mondoo.com/mql/v13/providers/shodan"},"credits":{"name":"credits","type":"\u0005","is_mandatory":true,"title":"Number of search credits","provider":"go.mondoo.com/mql/v13/providers/shodan"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/mql/v13/providers/shodan"},"member":{"name":"member","type":"\u0004","is_mandatory":true,"title":"Whether the account is a member","provider":"go.mondoo.com/mql/v13/providers/shodan"}},"title":"Shodan Search Engine account","desc":"Account that the connected API key belongs to. Confirms which identity is querying Shodan, whether it holds a paid membership, and how many search credits remain before queries are throttled or blocked, which matters when the account is shared by automation.","min_provider_version":"11.0.0","defaults":"displayName","provider":"go.mondoo.com/mql/v13/providers/shodan"}}}