Google Dorking
Automate the process of google dorking searches in order to detect leaked data.
Data Enrichment & Threat Intelligence · Google Dorking
Details
| ID | Google Dorking |
|---|---|
| Provider | Open Source |
| Category | Data Enrichment & Threat Intelligence |
| From Version | 6.2.0 |
| Docker Image | demisto/python3:3.12.8.3296088 |
| Supported Modules | Agentix XSIAM |
README
Automate the process of google dorking searches in order to detect leaked data.
Configure Google Dorking in Cortex
| Parameter | Description | Required |
|---|---|---|
| Search engine ID | True | |
| API Key | True | |
| File Types to Search | Comma separated file types that’ll be searched and downloaded. | True |
| Search Keywords | Comma separated keywords to look for in the files. | False |
| Sites To Search | Provide a single or comma separated list of sites from which to perform the search on. | True |
| Fetch incidents | False | |
| Incident type | False | |
| Maximum number of incidents per fetch | False | |
| First fetch time | False | |
| Trust any certificate (not secure) | False | |
| Use system proxy settings | False | |
| Incidents Fetch Interval | False |
Commands
You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.
google-dorking-search
Use the google search engine to search a query.
Base Command
google-dorking-search
Input
| Argument Name | Description | Required |
|---|---|---|
| after | Search after this date. Expected format: YYYY-MM-DD. | Optional |
| file_types | Comma separated file types that’ll be searched and downloaded. | Optional |
| keywords | Comma separated keywords to look for in the files. | Optional |
| urls | Provide a single or comma separated list of sites from which to perform the search on. | Optional |
Context Output
There is no context output for this command.
Command Example
``````
Human Readable Output
Configuration parameters
apiKey— Search engine ID (required)file_types— File Types to Search (required)keywords— Search Keywordsurls— Sites To Search (required)isFetch— Fetch incidentsincidentType— Incident typemax_fetch— Maximum number of incidents per fetchfirst_fetch— First fetch timeinsecure— Trust any certificate (not secure)proxy— Use system proxy settingsincidentFetchInterval— Incidents Fetch Interval
Commands (1)
-
google-dorking-searchUse the google search engine to search a query.