YETI module for MAC Vendor Lookup API

MAC address Vendor Lookup API is available as an extension for YETI – Your Everyday Threat Intelligence. It allows performing instant MAC Vendor Lookup for the MAC address observables. To get vendor details and other information provided by the API, you only need to run investigation for the MAC address attribute value.

Download the extension: https://github.com/yeti-platform/yeti

Prerequisites

1. 1You need a YETI instance up and running. To install and configure it, please refer to the official documentation.

Configuring the extension

1. 1Log in to your YETI instance
2. 2Go to Profile
3. 3Provide your API key by setting the macaddress.io API KEY value and click Save

Using the extension

1. 1Create new investigation. Go to New > Investigation
2. 2Then click Go to Graph
3. 3Click + button to add a new observable
4. 4Click the icon of the MAC address observable added
5. 5Go to Actions > Analytics
6. 6Click Run to start the Mac Address Vendor Lookup analytics
7. 7Click See Results to see the results
8. 8In order to see the API’s raw response, click Display raw results
9. 9Now, you can refresh the page and go to Info to see the contexts added
10. 10The contexts are also available within the Observables view. Just go to Main page, fill in the MAC address and press Launch

    Finally, choose the observable found.