Skip to content

PaloAltoWildFire#

README

PaloAlto WildFire responder#

This responder sends observable to PaloAlto WildFire service.

Requirements#

One need valid API-key to PaloAlto's WildFire service.
* Cloud WildFire * Local WildFire instance

Configuration#

  • api_key : WildFire API-key
  • wildfire_url: WildFire URL (default: Cloud version)

Official documenation#

Official API documentation: PaloAlto site.

PaloAltoWildFire_URL_submission#

Author: Keijo Korte - @korteke
License: AGPL-V3
Version: 1.0
Supported data types:
- url
- domain
- fqdn
Registration required: True
Subscription required: True
Free subscription: False
Third party service: https://www.paloaltonetworks.com/network-security/wildfire

Description#

Submit URL to PaloAlto WildFire service.

Configuration#

api_key PaloAlto WildFire API key
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
wildfire_url PaloAlto WildFire Takedown URL
Default value if not configured https://wildfire.paloaltonetworks.com/publicapi/submit/link
Type of the configuration item string
The configuration item can contain multiple values False
Is required True