AddDomainRiskScoreToContext

Sets average risk score to context for pivot result.

python · DomainTools Iris Investigate

Source

from typing import Any

from CommonServerPython import *

""" COMMAND FUNCTION """


def add_domain_riskscore_to_context(args: dict[str, Any]) -> CommandResults:
    domaintools_data = args["domaintools_data"]

    domain_name = domaintools_data.get("Name")
    domain_risk_score = domaintools_data.get("Analytics", {}).get("OverallRiskScore")

    result = {"Name": domain_name, "OverallRiskScore": domain_risk_score}

    return CommandResults(
        outputs_prefix="AddDomainRiskScoreToContext.HighRiskPivotedDomains",
        outputs_key_field="Name",
        outputs=result,
    )


""" MAIN FUNCTION """


def main():
    try:
        return_results(add_domain_riskscore_to_context(demisto.args()))
    except Exception as ex:
        return_error(f"Failed to execute AddDomainRiskScoreToContext. Error: {ex!s}")


""" ENTRY POINT """

if __name__ in ("__main__", "__builtin__", "builtins"):
    main()

README

Sets average risk score to context for pivot result.

Script Data


Name Description
Script Type python3
Tags DomainTools
Cortex XSOAR Version 6.9.0

Used In


This script is used in the following playbooks and scripts.

  • DomainTools Auto Pivots

Inputs


Argument Name Description
domaintools_data DomainTools Iris Enrich result.

Outputs


Path Description Type
AddDomainRiskScoreToContext.HighRiskPivotedDomains.Name The domain name Unknown
AddDomainRiskScoreToContext.HighRiskPivotedDomains.OverallRiskScore The overall risk score of the domain Unknown