mirror of https://github.com/MISP/misp-modules
10 lines
1.1 KiB
JSON
10 lines
1.1 KiB
JSON
{
|
|
"description": "DomainTools MISP expansion module.",
|
|
"logo": "logos/domaintools.png",
|
|
"requirements": ["Domaintools python library", "A Domaintools API access (username & apikey)"],
|
|
"input": "A MISP attribute included in the following list:\n- domain\n- hostname\n- email-src\n- email-dst\n- target-email\n- whois-registrant-email\n- whois-registrant-name\n- whois-registrant-phone\n- ip-src\n- ip-dst",
|
|
"output": "MISP attributes mapped after the Domaintools API has been queried, included in the following list:\n- whois-registrant-email\n- whois-registrant-phone\n- whois-registrant-name\n- whois-registrar\n- whois-creation-date\n- text\n- domain",
|
|
"references": ["https://www.domaintools.com/"],
|
|
"features": "This module takes a MISP attribute as input to query the Domaintools API. The API returns then the result of the query with some types we map into compatible types we add as MISP attributes.\n\nPlease note that composite attributes composed by at least one of the input types mentionned below (domains, IPs, hostnames) are also supported."
|
|
}
|