DomainMailSPFDMARC#

Author: torsolaso; Fabien Bloume, StrangeBee
License: AGPL-V3
Version: 1.2
Supported observables types:
- domain
- fqdn
- file
Registration required: False
Subscription required: False
Free subscription: False
Third party service: N/A

Description#

Check SPF and DMARC records for a domain, FQDN, or sender domain in .eml file. Supports reported/forwarded emails by extracting the sender from the inner nested message.

Configuration#

No specific configuration required.

Templates samples for TheHive#

DomainMailSPFDMARC long report sample

DomainMailSPFDMARC mini report sample