Skip to content

PassiveTotal#

PassiveTotal_Malware#

Author: CERT-BDF
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- fqdn
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal Malware Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Passive_Dns#

Author: CERT-BDF
License: AGPL-V3
Version: 2.1
Supported observables types:
- domain
- fqdn
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal Passive DNS Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Host_Pairs#

Author: Brandon Dixon (9bplus)
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- fqdn
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal Host Pairs Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Enrichment#

Author: CERT-BDF
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- fqdn
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal Enrichment Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Trackers#

Author: Brandon Dixon (9bplus)
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- fqdn
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal Trackers Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Unique_Resolutions#

Author: CERT-BDF
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- fqdn
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal Unique Resolutions Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Components#

Author: Brandon Dixon (9bplus)
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- fqdn
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal Components Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Whois_Details#

Author: CERT-BDF
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- fqdn
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal Whois Details Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Ssl_Certificate_Details#

Author: CERT-BDF
License: AGPL-V3
Version: 2.0
Supported observables types:
- hash
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal SSL Certificate Details Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Osint#

Author: CERT-BDF
License: AGPL-V3
Version: 2.0
Supported observables types:
- domain
- fqdn
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal OSINT Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.

PassiveTotal_Ssl_Certificate_History#

Author: CERT-BDF
License: AGPL-V3
Version: 2.0
Supported observables types:
- hash
- ip
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

PassiveTotal SSL Certificate History Lookup.

Configuration#

username Define the username of the account used to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
key Define the API key to use to connect the service
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.