Alexa Rank Indicator

Details

ID	`Alexa Rank Indicator`
Provider	Amazon
Category	Data Enrichment & Threat Intelligence
From Version	5.0.0
Docker Image	`demisto/python:2.7.18.27799`
Supported Modules	Agentix

README

Alexa provides website ranking information that can be useful in determining if the domain in question has a strong web presence.
This integration was integrated and tested with Amazon Web Information Services.

Configure Alexa Rank Indicator in Cortex

Parameter	Description	Required
Source Reliability	Reliability of the source providing the intelligence data.	True
Sensitivity threshold for configuring which domains are suspicious versus trusted.		True
Alexa rank - top domains to be considered trusted.	These domains will be given a DbotScore of good.	True
Use system proxy settings		False
Trust any certificate (not secure)		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

domain

Provides an Alexa ranking of the Domain in question.

Base Command

domain

Input

Argument Name	Description	Required
domain	Domain to search.	Required

Context Output

Path	Type	Description
Domain.Name	string	The Domain being checked
DBotScore.Score	number	The actual score.
DBotScore.Vendor	string	The vendor used to calculate the score.
DBotScore.Domain	string	Domain being reported
DBotScore.Type	string	The indicator type.
DBotScore.Indicator	string	The indicator that was tested.
Alexa.Domain.Indicator	string	The Domain being checked
Alexa.Domain.Name	string	The Domain being checked
Alexa.Domain.Rank	string	Alexa rank as determined by Amazon

Command Example

!domain domain=demisto.com

Context Example

{
    "Alexa": {
        "Domain": {
            "Indicator": "demisto.com",
            "Name": "demisto.com",
            "Rank": "9465040"
        }
    },
    "DBotScore": [
        {
            "Domain": "demisto.com",
            "Indicator": "demisto.com",
            "Reliability": "A - Completely reliable",
            "Score": 2,
            "Type": "domain",
            "Vendor": "Alexa Rank Indicator"
        }
    ],
    "Domain": {
        "Name": "demisto.com"
    }
}

Human Readable Output

Configuration parameters

integrationReliability — Source Reliability (required)
threshold — Sensitivity threshold for configuring which domains are suspicious versus trusted. (required)
benign — Alexa rank - top domains to be considered trusted. (required)
proxy — Use system proxy settings
insecure — Trust any certificate (not secure)

Commands (1)

domain
Provides an Alexa ranking of the Domain in question.

Source

Alexa.py Alexa.yml Alexa_description.md command_examples.txt

Download History Raw

category: Data Enrichment & Threat Intelligence
provider: Amazon
commonfields:
  id: Alexa Rank Indicator
  version: -1
configuration:
- additionalinfo: Reliability of the source providing the intelligence data.
  defaultvalue: A - Completely reliable
  display: Source Reliability
  name: integrationReliability
  options:
  - A+ - 3rd party enrichment
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  required: true
  type: 15
- defaultvalue: '2000000'
  display: Sensitivity threshold for configuring which domains are suspicious versus trusted.
  name: threshold
  required: true
  type: 0
- display: Alexa rank - top domains to be considered trusted.
  name: benign
  defaultvalue: "0"
  type: 0
  required: true
  additionalinfo: These domains will be given a DbotScore of good.
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
description: Deprecated. Vendor has declared end of life for this product. No available replacement.
deprecated: true
display: Alexa Rank Indicator (Deprecated)
name: Alexa Rank Indicator
script:
  commands:
  - arguments:
    - default: true
      description: Domain to search.
      name: domain
      required: true
    description: Provides an Alexa ranking of the Domain in question.
    name: domain
    outputs:
    - contextPath: Domain.Name
      description: The Domain being checked
      type: string
    - contextPath: DBotScore.Score
      description: The actual score.
      type: number
    - contextPath: DBotScore.Vendor
      description: The vendor used to calculate the score.
      type: string
    - contextPath: DBotScore.Domain
      description: Domain being reported
      type: string
    - contextPath: DBotScore.Type
      description: The indicator type.
      type: string
    - contextPath: DBotScore.Indicator
      description: The indicator that was tested.
      type: string
    - contextPath: Alexa.Domain.Indicator
      description: The Domain being checked
      type: string
    - contextPath: Alexa.Domain.Name
      description: The Domain being checked
      type: string
    - contextPath: Alexa.Domain.Rank
      description: Alexa rank as determined by Amazon
      type: string
  runonce: false
  script: ''
  type: python
  subtype: python2
  dockerimage: demisto/python:2.7.18.27799
tests:
- Alexa Test Playbook
fromversion: 5.0.0

Alexa Rank Indicator Deprecated