Patrowl

README

Patrowl

Get the current Patrowl report for a fdqn, a domain or an IP address.

The analyzer comes in only one flavor called Patrowl_GetReport.

Requirements

You need a running Patrowl instance or to have access to one to use the analyzer. Supply the following parameters to the analyzer in order to use it:

• url: The PatrowlManager service URL
• api_key: A valid API Key of a Patrowl user

Patrowl_GetReport

Author: Nicolas Mattiocco
License: AGPL-V3
Version: 1.0
Supported observables types:
- fqdn
- domain
- ip
Registration required: False
Subscription required: False
Free subscription: False
Third party service: https://patrowl.io/home

Description

Get the current Patrowl report for a fdqn, a domain or an IP address.

Configuration

url	Define the PatrOwl url
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

api_key	Define the PatrOwl API Key
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

Templates samples for TheHive