SilentPush_v2

The Silent Push Platform uses first-party data and a proprietary scanning engine to enrich global DNS data with risk and reputation scoring, giving security teams the ability to join the dots across the entire IPv4 and IPv6 range, and identify adversary infrastructure before an attack is launched. The content pack integrates with the Silent Push system to gain insights into domain/IP information, reputations, enrichment, and infratag-related details. It also provides functionality to live-scan URLs and take screenshots of them. Additionally, it allows fetching future attack feeds from the Silent Push system.

Data Enrichment & Threat Intelligence · Silent Push

Configuration parameters

  • url — Base URL (required)
  • credentials — API Key
  • threat-check-key — The Threat Check key
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)

Commands (30)

  • silentpush-add-feed

    Add the new feed.

  • silentpush-add-feed-tags

    Add indicators to the feed.

  • silentpush-add-indicator-tags

    Updates tags to the indicators.

  • silentpush-add-indicators

    Add indicators to the feed.

  • silentpush-bulk-enrich

    Enriches IPs or Domains in a bulk.

  • silentpush-density-lookup

    Queries granular DNS/IP parameters (e.g., NS servers, MX servers, IPaddresses, ASNs) for density information.

  • silentpush-domain-risk-score

    Scores a list of Domain addresses.

  • silentpush-forward-padns-lookup

    Performs a forward PADNS lookup using various filtering parameters.

  • silentpush-get-asn-reputation

    This command retrieve the reputation information for an IPv4.

  • silentpush-get-asn-takedown-reputation

    This command retrieve the takedown reputation information for an Autonomous System Number (ASN).

  • silentpush-get-asns-for-domain

    Retrieves Autonomous System Numbers (ASNs) associated with a domain.

  • silentpush-get-data-exports

    Runs the threat check on the specified export type.

  • silentpush-get-domain-certificates

    Get certificate data collected from domain scanning.

  • silentpush-get-enrichment-data

    Retrieves comprehensive enrichment information for a given resource (domain, IPv4, or IPv6).

  • silentpush-get-ipv4-reputation

    Retrieves the reputation information for an IPv4.

  • silentpush-get-nameserver-reputation

    Retrieves historical reputation data for a specified nameserver, including reputation scores and optional detailed calculation information.

  • silentpush-get-subnet-reputation

    Retrieves the reputation history for a specific subnet.

  • silentpush-ip-diversity-lookup

    Get IP diversity (number of IP addresses pointed to over time) for the query to qtype.

  • silentpush-ip-diversity-patterns

    Search for IP Diversity patterns, with optional name server and domain name pattern matching.

  • silentpush-ipv4-risk-score

    Scores a list of IPv4 addresses.

  • silentpush-ipv6-risk-score

    Scores a list of IPv6 addresses.

  • silentpush-live-url-scan

    Scan a URL to retrieve hosting metadata.

  • silentpush-multi-conditional-padns-lookup

    Searches passive DNS data for records matching both query and answer.

  • silentpush-retry-job

    Retry another command which returned a Job ID.

  • silentpush-reverse-padns-lookup

    Retrieve reverse Passive DNS data for specific DNS record types.

  • silentpush-run-threat-check

    Runs the threat check on the specified resource.

  • silentpush-search-domains

    Search for domains with optional filters.

  • silentpush-search-scan-data

    Search Silent Push scan data repositories using SPQL queries.

  • silentpush-tlp-reports

    List all the TLP Reports.

  • silentpush-whois

    Get Whois information.