misp-modules/documentation/website/expansion/circl_passivedns.json

15 lines
854 B
JSON

{
"description": "Module to access CIRCL Passive DNS.",
"logo": "passivedns.png",
"requirements": [
"pypdns: Passive DNS python library",
"A CIRCL passive DNS account with username & password"
],
"input": "Hostname, domain, or ip-address attribute.",
"ouput": "Passive DNS objects related to the input attribute.",
"features": "This module takes a hostname, domain or ip-address (ip-src or ip-dst) attribute as input, and queries the CIRCL Passive DNS REST API to get the asssociated passive dns entries and return them as MISP objects.\n\nTo make it work a username and a password are thus required to authenticate to the CIRCL Passive DNS API.",
"references": [
"https://www.circl.lu/services/passive-dns/",
"https://datatracker.ietf.org/doc/draft-dulaunoy-dnsop-passive-dns-cof/"
]
}