Publisher: Splunk
Connector Version: 2.0.8
Product Vendor: HoneyDB
Product Name: HoneyDB
Product Version Supported (regex): ".*"
Minimum Product Version: 4.9.39220
Performs investigative actions on the HoneyDB service
The below configuration variables are required for this Connector to operate. These variables are specified when configuring a HoneyDB asset in SOAR.
| VARIABLE | REQUIRED | TYPE | DESCRIPTION |
|---|---|---|---|
| api_id | required | string | HoneyDB API ID |
| api_key | required | password | Threat information API Key |
test connectivity - Validate the asset configuration for connectivity
lookup ip - Check for the presence of an IP in a threat intelligence feed
Validate the asset configuration for connectivity
Type: test
Read only: True
No parameters are required for this action
No Output
Check for the presence of an IP in a threat intelligence feed
Type: investigate
Read only: True
Source feed to use for IP lookup:
- Both: Merges the Bad Hosts and Twitter feed list of JSON dictionaries and searches for the IP with the additional information from Twitter for that specific IP
- Bad Hosts: Searches only in the list of bad hosts with no additional data from Twitter
- Twitter: Searches the IP in the Twitter feed with a list of tweets associated with that IP
| PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS |
|---|---|---|---|---|
| ip | required | IP to lookup | string | ip |
| feed | optional | Source feed: 'Both', 'Bad Hosts', 'Twitter' | string |
| DATA PATH | TYPE | CONTAINS | EXAMPLE VALUES |
|---|---|---|---|
| action_result.status | string | success failed | |
| action_result.parameter.feed | string | Both | |
| action_result.parameter.ip | string | ip |
45.79.12.9 |
| action_result.data.*.count | numeric | ||
| action_result.data.*.feed | string | ||
| action_result.data.*.ip | string | ip |
|
| action_result.data.*.last_seen | string | 2017-07-27 | |
| action_result.data.*.tweet.created | string | 2017-07-27 | |
| action_result.data.*.tweet.id | string | ||
| action_result.data.*.tweet.screen_name | string | ||
| action_result.data.*.tweet.text | string | ||
| action_result.summary.bad_hosts_count | numeric | 623 | |
| action_result.summary.bad_hosts_last_seen | string | 2017-07-27 | |
| action_result.summary.ip | string | 45.79.12.9 | |
| action_result.summary.twitter_count | numeric | 712 | |
| action_result.summary.twitter_last_seen | string | 2017-07-30 | |
| action_result.message | string | ||
| summary.total_objects | numeric | 1 | |
| summary.total_objects_successful | numeric | 1 |
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent