MAC Vendors

Query MAC Vendors for vendor names when providing a MAC address. MAC Vendors maintains a list of vendors provided directly from the IEEE Standards Association and is updated multiple times each day. The IEEE is the registration authority and provides data on over 16,500 registered vendors.

Utilities · MAC Vendors

Details

IDMAC Vendors
ProviderNivel Technologies
CategoryUtilities
From Version6.0.0
Docker Imagedemisto/python3:3.12.8.3296088
Supported ModulesAgentix XSIAM

README

Query MAC Vendors for vendor names when providing a MAC address.
MAC Vendors maintains a list of vendors provided directly from the IEEE Standards Association and is updated multiple times each day. The IEEE is the registration authority and provides data on over 16,500 registered vendors.

This integration was integrated and tested with the latest verison of MAC Vendors API as of 31st January 2022.

Configure MAC Vendors in Cortex

Parameter Description Required
API Key No API key is required for up to 1,000 requests per day at 1 request per second. For higher limits, please use an API key. False
Trust any certificate (not secure)   False
Use system proxy settings   False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

macvendors-lookup-mac


Resolves a MAC address to a vendor name.

Base Command

macvendors-lookup-mac

Input

Argument Name Description Required
mac MAC address to lookup. Can be any of the formats; 00-11-22-33-44-55, 00:11:22:33:44:55, 00.11.22.33.44.55, 001122334455, 0011.2233.4455. Required

Context Output

Path Type Description
MACVendors.mac string MAC Address
MACVendors.vendor string Vendor Name

Configuration parameters

  • apiKey — API Key
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (1)

  • macvendors-lookup-mac

    Resolves a MAC address to a vendor name.

commonfields:
  id: MAC Vendors
  version: -1
name: MAC Vendors
display: MAC Vendors
detaileddescription: >-
  ## MAC Vendors

  ### Overview
  Find MAC Address Vendors

  ### API Keys
  API Keys are not required but are limited to 1,000 queries per day (at 2 requests
  per second).
  API Keys can be purchased from https://macvendors.com/plans

  ---
category: Utilities
provider: Nivel Technologies
configuration:
- name: apiKey
  display: API Key
  defaultvalue:
  type: 4
  additionalinfo: No API key is required for up to 1,000 requests per day at 1 request per second. For higher limits, please use an API key.
  required: false
- name: insecure
  display: Trust any certificate (not secure)
  type: 8
  additionalinfo:
  required: false
- name: proxy
  display: Use system proxy settings
  type: 8
  additionalinfo:
  required: false
description: >
  Query MAC Vendors for vendor names when providing a MAC address.

  MAC Vendors maintains a list of vendors provided directly from the IEEE Standards
  Association and is updated multiple times each day. The IEEE is the registration
  authority and provides data on over 16,500 registered vendors.
script:
  commands:
  - arguments:
    - name: mac
      description: MAC address to lookup. Can be any of the formats;  00-11-22-33-44-55, 00:11:22:33:44:55, 00.11.22.33.44.55, 001122334455, 0011.2233.4455.
      required: true
    description: Resolves a MAC address to a vendor name.
    name: macvendors-lookup-mac
    outputs:
    - contextPath: MACVendors.mac
      description: MAC Address.
      type: string
    - contextPath: MACVendors.vendor
      description: Vendor Name.
      type: string
  runonce: false
  script: "-"
  type: python
  subtype: python3
  dockerimage: demisto/python3:3.12.8.3296088
fromversion: "6.0.0"
tests:
- No tests (auto formatted)