Cymon Deprecated

Deprecated. Analyzes suspicious domains and IP addresses

Data Enrichment & Threat Intelligence · Deprecated Content (Deprecated)

Details

IDCymon
ProviderCYJAX
CategoryData Enrichment & Threat Intelligence
From Version5.0.0
Docker Imagedemisto/python:2.7.18.20958

Configuration parameters

  • unsecure — Trust any certificate (not secure)
  • useProxy — Use system proxy settings

Commands (2)

  • domain Deprecated

    Retrieves a report on a given domain

  • ip Deprecated

    Check the reputation of an IP address

category: Data Enrichment & Threat Intelligence
provider: CYJAX
commonfields:
  id: Cymon
  version: -1
configuration:
- display: Trust any certificate (not secure)
  name: unsecure
  type: 8
  required: false
- display: Use system proxy settings
  name: useProxy
  type: 8
  required: false
description: Deprecated. Analyzes suspicious domains and IP addresses
display: Cymon (Deprecated)
deprecated: true
name: Cymon
script:
  commands:
  - arguments:
    - default: true
      description: IP to check the reputation of
      name: ip
      required: true
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Returns all results, of which there can be hundreds. We recommend that you do not use this argument in playbooks. Default is false.
      name: fullResponse
      predefined:
      - 'true'
      - 'false'
    deprecated: true
    description: Check the reputation of an IP address
    name: ip
    outputs:
    - contextPath: IP.Address
      description: Malicious IP address
      type: string
    - contextPath: IP.ASN
      description: Malicious IP ASN
      type: number
    - contextPath: IP.Geo.Country
      description: Malicious IP country
      type: string
    - contextPath: IP.Malicious.Vendor
      description: For malicious IPs, the vendor that made the decision
      type: string
    - contextPath: IP.Malicious.Description
      description: For malicious IPs, the reason the vendor made the decision
      type: string
    - contextPath: Cymon.IP.Domains
      description: Related malicious domains
      type: Unknown
  - arguments:
    - default: true
      description: A domain name
      name: domain
      required: true
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Displays all the malicious hits of the domain
      name: fullResponse
      predefined:
      - 'true'
      - 'false'
    deprecated: true
    description: Retrieves a report on a given domain
    name: domain
    outputs:
    - contextPath: Domain.Name
      description: Domain name
      type: string
    - contextPath: Domain.Malicious.Vendor
      description: For malicious Domains, the vendor that made the decision
      type: string
    - contextPath: Domain.Malicious.Description
      description: For malicious domains, the reason the vendor made the decision
      type: string
    - contextPath: Cymon.Domain.Activities.Title
      description: 'Title describing the malicious activity '
      type: Unknown
    - contextPath: Cymon.Domain.Activities.Tags
      description: Tags describing the malicious activity
      type: Unknown
    - contextPath: Cymon.Domain.Activities.Time
      description: The time the activity was last reported
      type: Unknown
    - contextPath: Cymon.Domain.Activities.Hostname
      description: The hostname on which the malicious activity was reported
      type: Unknown
    - contextPath: Cymon.Domain.Activities.IP
      description: The IP on which the malicious activity was reported
      type: Unknown
  runonce: false
  script: ''
  type: python
  subtype: python2
  dockerimage: demisto/python:2.7.18.20958
tests:
- No tests
fromversion: 5.0.0