RDAP (v1.0.2)
This pack provides integration and automation for RDAP (Registration Data Access Protocol), allowing users to query and retrieve registration data for Internet resources such as domain names, IP addresses, and autonomous system numbers.
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Categories
- Data Enrichment & Threat Intelligence
Integrations (1)
- RDAP
README
RDAP Pack
The RDAP (Registration Data Access Protocol) pack allows you to query and retrieve registration data for Internet resources, including domain names, IP addresses, and autonomous system numbers.
Pack Content
Integrations
RDAP: Allows querying RDAP servers for domain and IP information.
Playbooks
No playbooks are currently included in this pack.
Scripts
No scripts are currently included in this pack.
Use Cases
- Enrichment of domain and IP data for threat intelligence purposes.
- Gathering registration information for domains and IP addresses during investigations.
- Automating the retrieval of WHOIS-like data using the more modern RDAP protocol.
Additional Information
- This pack uses the RDAP protocol, which is designed to replace the older WHOIS protocol.
- RDAP provides a more standardized and machine-readable format for registration data.
- For more information on RDAP, visit ICANN’s RDAP page.
Known Limitations
- The availability and completeness of data may vary depending on the RDAP server being queried.
- Some RDAP servers may have rate limiting in place, which could affect the frequency of queries.
Troubleshooting
If you encounter any issues:
- Ensure that the integration is correctly configured.
- Check that the queried domain or IP address is valid.
- Verify that you have internet connectivity to reach RDAP servers.
For more information and support, refer to the integration’s documentation or contact Cortex XSOAR support.