HYAS Insight
Use the HYAS Insight integration to interactively lookup PassiveDNS, DynamicDNS, WHOIS, Sample Malware Records, C2 Attribution, Passive Hash, SSL Certificate, Open Source Indicators, Device Geo, Sinkhole, Malware Sample Information – either as playbook tasks or through API calls in the War Room.
Data Enrichment & Threat Intelligence · HYAS Insight
Configuration parameters
X-API-Key— HYAS Insight Api Key (required)insecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (14)
-
hyas-get-associated-domains-by-hashReturns associated Domain's for the provided hash value.
-
hyas-get-associated-ips-by-hashReturns associated IP's for the provided hash value.
-
hyas-get-c2attribution-records-by-indicatorReturn C2 Attribution records for the provided indicator value.
-
hyas-get-device-geo-records-by-ip-addressReturns a list of mobile geolocation information.
-
hyas-get-dynamic-dns-records-by-indicatorReturns DynamicDNS records for the provided indicator value.
-
hyas-get-malware-sample-information-by-hashReturns malware information.
-
hyas-get-malware-samples-records-by-indicatorReturns Malware Sample records for the provided indicator value.
-
hyas-get-opensource-indicator-records-by-indicatorReturn Open Source intel records for the provided indicator value.
-
hyas-get-passive-dns-records-by-indicatorReturns PassiveDNS records for the provided indicator value.
-
hyas-get-passive-hash-records-by-indicatorReturn passive hash records for the provided indicator value.
-
hyas-get-sinkhole-records-by-ipv4-addressReturns sinkhole information.
-
hyas-get-ssl-certificate-records-by-indicatorReturn SSL certificate records for the provided indicator value.
-
hyas-get-whois-current-records-by-domainReturns WHOIS Current records for the provided indicator value.
-
hyas-get-whois-records-by-indicatorReturns WHOIS records for the provided indicator value.