Skip to content

Patrowl#

README

Patrowl#

Get the current Patrowl report for a fdqn, a domain or an IP address.

The analyzer comes in only one flavor called Patrowl_GetReport.

Requirements#

You need a running Patrowl instance or to have access to one to use the analyzer. Supply the following parameters to the analyzer in order to use it:

  • url: The PatrowlManager service URL
  • api_key: A valid API Key of a Patrowl user

Patrowl_GetReport#

Author: Nicolas Mattiocco
License: AGPL-V3
Version: 1.0
Supported observables types:
- fqdn
- domain
- ip
Registration required: False
Subscription required: False
Free subscription: False
Third party service: https://patrowl.io/home

Description#

Get the current Patrowl report for a fdqn, a domain or an IP address.

Configuration#

url Define the PatrOwl url
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
api_key Define the PatrOwl API Key
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

Patrowl_GetReport: short report template

Patrowl_GetReport: long report template