Roksit DNS Security

This integration provides adding selected domains to the Roksit Secure DNS's Blacklisted Domain List through API .

Details

ID	`Roksit DNS Security`
Provider	Roksit
Category	Network Security
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Supported Modules	Agentix XSIAM

README

This integration provides adding selected domains to the Roksit Secure DNS’s Blacklisted Domain List through API .
This integration was integrated and tested with version 1.0.0 of Roksit DNS Security (DNSSense).

Configure Roksit DNS Security (DNSSense) in Cortex

Parameter	Required
Server URL (e.g. https://portal.roksit.com/api/integration/blacklist)	True
API Key	True
Trust any certificate (not secure)	False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

Roksit-add-to-blacklist

This command adds a given domain to tha Roksit blacklist.

Base Command

Roksit-add-to-blacklist

Input

Argument Name	Description	Required
Domain	The Domain to send to the blacklist.	Required

Context Output

There is no context output for this command.

Command example

!Roksit-add-to-blacklist Domain=dummy.com

Human Readable Output

dummy.com was successfully added to the blacklist.

Configuration parameters

url — Server URL (e.g. https://portal.roksit.com/api/integration/blacklist) (required)
credentials — (required)
insecure — Trust any certificate (not secure)

Commands (1)

Roksit-add-to-blacklist
This command adds a given domain to tha Roksit blacklist.

Source

RoksitDNSSecurity.py RoksitDNSSecurity.yml RoksitDNSSecurity_description.md command_examples.txt

Download History Raw

category: Network Security
provider: Roksit
commonfields:
  id: Roksit DNS Security
  version: -1
configuration:
- defaultvalue: https://portal.roksit.com/api/integration/blacklist
  display: Server URL (e.g. https://portal.roksit.com/api/integration/blacklist)
  name: url
  required: true
  type: 0
- display: ""
  displaypassword: API Key
  hiddenusername: true
  name: credentials
  required: true
  type: 9
- display: Trust any certificate (not secure)
  name: insecure
  required: false
  type: 8
description: This integration provides adding selected domains to the Roksit Secure DNS's Blacklisted Domain List through API .
display: Roksit DNS Security (DNSSense)
name: Roksit DNS Security
script:
  commands:
  - arguments:
    - description: The Domain to send to the blacklist.
      name: Domain
      required: true
    description: This command adds a given domain to tha Roksit blacklist.
    name: Roksit-add-to-blacklist
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: true
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)