SOCRadarRapidReputation

Enrich indicators (IP, Domain, URL, Hash) by obtaining reputation information via SOCRadar Rapid Reputation API.

Category

Data Enrichment & Threat Intelligence

Pack

SOCRadar

Configuration parameters

• apikey — (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• integrationReliability — Source Reliability
• feedExpirationPolicy —
• feedExpirationInterval —

Commands (6)

• domain — Checks reputation of provided domain entities using SOCRadar Rapid Reputation API.
• file — Checks reputation of provided file hash entities using SOCRadar Rapid Reputation API.
• ip — Checks reputation of provided IP entities using SOCRadar Rapid Reputation API.
• socradar-bulk-check — Bulk check reputation for mixed list of indicators. Automatically detects and processes IPs, domains, URLs, and hashes. Maximum 100 indicators per batch. Rate limit - 1 req/sec (100 indicators = ~100 seconds).
• socradar-reputation — Checks reputation of any entity type using SOCRadar Rapid Reputation API.
• url — Checks reputation of provided URL entities using SOCRadar Rapid Reputation API.