Umbrella

Umbrella_Report

Author: Kyle Parrish
License: AGPL-V3
Version: 1.0
Supported observables types:
- domain
- fqdn
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description

Query the Umbrella Reporting API for recent DNS queries and their status.

Configuration

api_key	Api Key provided by Umbrella Admin Console.
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

api_secret	Api Secret provided by Umbrella Admin Console.
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

organization_id	Organization ID provided by Umbrella Admin Console.
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

query_limit	Maximum number of results to return.
Default value if not configured	N/A
Type of the configuration item	number
The configuration item can contain multiple values	False
Is required	False

Templates samples for TheHive

No template samples to display.