Cymon Deprecated
Deprecated. Analyzes suspicious domains and IP addresses
Data Enrichment & Threat Intelligence · Deprecated Content (Deprecated)
Details
| ID | Cymon |
|---|---|
| Provider | CYJAX |
| Category | Data Enrichment & Threat Intelligence |
| From Version | 5.0.0 |
| Docker Image | demisto/python:2.7.18.20958 |
Configuration parameters
unsecure— Trust any certificate (not secure)useProxy— Use system proxy settings
Commands (2)
-
domainDeprecatedRetrieves a report on a given domain
-
ipDeprecatedCheck the reputation of an IP address
category: Data Enrichment & Threat Intelligence provider: CYJAX commonfields: id: Cymon version: -1 configuration: - display: Trust any certificate (not secure) name: unsecure type: 8 required: false - display: Use system proxy settings name: useProxy type: 8 required: false description: Deprecated. Analyzes suspicious domains and IP addresses display: Cymon (Deprecated) deprecated: true name: Cymon script: commands: - arguments: - default: true description: IP to check the reputation of name: ip required: true - auto: PREDEFINED defaultValue: 'false' description: Returns all results, of which there can be hundreds. We recommend that you do not use this argument in playbooks. Default is false. name: fullResponse predefined: - 'true' - 'false' deprecated: true description: Check the reputation of an IP address name: ip outputs: - contextPath: IP.Address description: Malicious IP address type: string - contextPath: IP.ASN description: Malicious IP ASN type: number - contextPath: IP.Geo.Country description: Malicious IP country type: string - contextPath: IP.Malicious.Vendor description: For malicious IPs, the vendor that made the decision type: string - contextPath: IP.Malicious.Description description: For malicious IPs, the reason the vendor made the decision type: string - contextPath: Cymon.IP.Domains description: Related malicious domains type: Unknown - arguments: - default: true description: A domain name name: domain required: true - auto: PREDEFINED defaultValue: 'false' description: Displays all the malicious hits of the domain name: fullResponse predefined: - 'true' - 'false' deprecated: true description: Retrieves a report on a given domain name: domain outputs: - contextPath: Domain.Name description: Domain name type: string - contextPath: Domain.Malicious.Vendor description: For malicious Domains, the vendor that made the decision type: string - contextPath: Domain.Malicious.Description description: For malicious domains, the reason the vendor made the decision type: string - contextPath: Cymon.Domain.Activities.Title description: 'Title describing the malicious activity ' type: Unknown - contextPath: Cymon.Domain.Activities.Tags description: Tags describing the malicious activity type: Unknown - contextPath: Cymon.Domain.Activities.Time description: The time the activity was last reported type: Unknown - contextPath: Cymon.Domain.Activities.Hostname description: The hostname on which the malicious activity was reported type: Unknown - contextPath: Cymon.Domain.Activities.IP description: The IP on which the malicious activity was reported type: Unknown runonce: false script: '' type: python subtype: python2 dockerimage: demisto/python:2.7.18.20958 tests: - No tests fromversion: 5.0.0