SilentPush

The Silent Push Platform uses first-party data and a proprietary scanning engine to enrich global DNS data with risk and reputation scoring, giving security teams the ability to join the dots across the entire IPv4 and IPv6 range, and identify adversary infrastructure before an attack is launched. The content pack integrates with the Silent Push system to gain insights into domain/IP information, reputations, enrichment, and infratag-related details. It also provides functionality to live-scan URLs and take screenshots of them. Additionally, it allows fetching future attack feeds from the Silent Push system.

Data Enrichment & Threat Intelligence · Silent Push

Configuration parameters

  • url — Base URL (required)
  • credentials — API Key (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (26)

  • silentpush-add-feed

    This command add the new feed

  • silentpush-add-feed-tags

    This command add indicators to the feed

  • silentpush-add-indicator-tags

    This command updates tags to the indicators

  • silentpush-add-indicators

    This command add indicators to the feed

  • silentpush-density-lookup

    This command queries granular DNS/IP parameters (e.g., NS servers, MX servers, IPaddresses, ASNs) for density information.

  • silentpush-forward-padns-lookup

    This command performs a forward PADNS lookup using various filtering parameters.

  • silentpush-get-asn-reputation

    This command retrieve the reputation information for an IPv4.

  • silentpush-get-asn-takedown-reputation

    This command retrieve the takedown reputation information for an Autonomous System Number (ASN).

  • silentpush-get-asns-for-domain

    This command retrieves Autonomous System Numbers (ASNs) associated with a domain.

  • silentpush-get-data-exports

    This command runs the threat check on the specified

  • silentpush-get-domain-certificates

    This command get certificate data collected from domain scanning.

  • silentpush-get-enrichment-data

    This command retrieves comprehensive enrichment information for a given resource (domain, IPv4, or IPv6).

  • silentpush-get-future-attack-indicators

    This command fetch indicators of potential future attacks using a feed UUID.

  • silentpush-get-ipv4-reputation

    This command retrieves the reputation information for an IPv4.

  • silentpush-get-job-status

    This command retrieve status of running job or results from completed job.

  • silentpush-get-nameserver-reputation

    This command retrieves historical reputation data for a specified nameserver,including reputation scores and optional detailed calculation information.

  • silentpush-get-subnet-reputation

    This command retrieves the reputation history for a specific subnet.

  • silentpush-list-domain-information

    This command get domain information along with Silent Push risk score and live whois information for multiple domains.

  • silentpush-list-domain-infratags

    This command get infratags for multiple domains with optional clustering.

  • silentpush-list-ip-information

    This command get IP information for multiple IPv4s and IPv6s.

  • silentpush-live-url-scan

    This command scan a URL to retrieve hosting metadata.

  • silentpush-reverse-padns-lookup

    This command retrieve reverse Passive DNS data for specific DNS record types.

  • silentpush-run-threat-check

    This command runs the threat check on the specified

  • silentpush-screenshot-url

    This commandGenerate screenshot of a URL.

  • silentpush-search-domains

    This command search for domains with optional filters.

  • silentpush-search-scan-data

    This command search Silent Push scan data repositories using SPQL queries.