Skip to content

Umbrella#

Umbrella_Report#

Author: Kyle Parrish
License: AGPL-V3
Version: 1.0
Supported observables types:
- domain
- fqdn
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

Query the Umbrella Reporting API for recent DNS queries and their status.

Configuration#

api_key Api Key provided by Umbrella Admin Console.
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
api_secret Api Secret provided by Umbrella Admin Console.
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
organization_id Organization ID provided by Umbrella Admin Console.
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
query_limit Maximum number of results to return.
Default value if not configured N/A
Type of the configuration item number
The configuration item can contain multiple values False
Is required False

Templates samples for TheHive#

No template samples to display.


Last update: November 15, 2021 06:39:13