CheckSenderDomainDistance
Get the string distance for the sender from our domain.
python · Common Scripts
Details
| ID | CheckSenderDomainDistance |
|---|---|
| Language | python |
| From Version | 5.0.0 |
| Docker Image | demisto/python3:3.12.13.10404775 |
| Tags | server phishing Condition |
README
Gets the string distance for the sender from our domain.
Script Data
| Name | Description |
|---|---|
| Script Type | python |
| Tags | server, phishing, Condition |
Inputs
| Argument Name | Description |
|---|---|
| domain | The domain to be measured against the domain in the sender’s email address. Usually the domain used by the company for email. For example, “acme.com”, when users are assigned jane@acme.com (could be multiple domains with a comma-separator). |
| sender | The sender’s email address. |
| distance | The distance that is considered close. |
Outputs
| Path | Description | Type |
|---|---|---|
| LevenshteinDistance | The proximity of the sender domain to our configured domains. | Unknown |
commonfields: id: CheckSenderDomainDistance version: -1 name: CheckSenderDomainDistance script: '' type: python subtype: python3 tags: - server - phishing - Condition comment: Get the string distance for the sender from our domain. system: true args: - name: domain required: true default: true description: The domain to be measured against the domain in the sender's email address.Usually the domain used by the company for email, e.g. acme.com when users are assigned jane@acme.com (could be multiple domains with a comma separator). - name: sender required: true description: Sender email address. - name: distance description: Distance that is considered close. defaultValue: "3" outputs: - contextPath: LevenshteinDistance description: The closeness of the sender domain to our configured domains. scripttarget: 0 dependson: {} timeout: 0s fromversion: 5.0.0 dockerimage: demisto/python3:3.12.13.10404775 tests: - No tests (auto formatted)