Domain
Details
| ID | domainRepUnified |
|---|---|
| From Version | 5.5.0 |
| Reputation Command | domain |
| Format Script | ExtractDomainAndFQDNFromUrlAndEmail |
| Context Path | Domain(val.Name && val.Name === obj.Name) |
| Expiration (days) | 20160 |
| Layout | Domain Indicator |
Detection Regex
(?i)[_]?(?P<scheme>(?:http|ftp|hxxp)s?(?:://|-3A__|%3A%2F%2F))?(?:%[\da-f][\da-f])?(?P<domain>(?:[\p{L}\d\-–_]+(?:\.|\[\.\]))*(?:[\p{L}\d\-–]+(?:\.|\[\.\]))[\p{L}\p{N}]{2,})(@|%40)?(?:[^\p{L}\p{N}_-]|$)
Enhancement Scripts
DomainReputation
{ "id": "DomainGlob", "version": -1, "fromVersion": "5.5.0", "modified": "2019-07-18T07:37:50.270500504Z", "sortValues": null, "commitMessage": "", "shouldPublish": false, "shouldCommit": false, "regex": "", "details": "DomainGlob", "prevDetails": "DomainGlob", "reputationScriptName": "", "reputationCommand": "", "enhancementScriptNames": [], "system": true, "locked": false, "disabled": false, "file": false, "updateAfter": 0, "mergeContext": false, "formatScript": "", "contextPath": "", "contextValue": "", "excludedBrands": [], "expiration": 20160, "defaultMapping": {}, "layout": "domainRepUnified", "supportedModules": [ "agentix", "xsiam" ] }