CheckTags
Check DomainTools domain tags and if a tag is found mark incident as high severity.
python · DomainTools Iris Investigate
Details
| ID | CheckTags |
|---|---|
| Language | python |
| From Version | 6.6.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Tags | DomainTools |
README
Check DomainTools domain tags and if a tag is found mark incident as high severity
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | DomainTools |
| Cortex XSOAR Version | 6.9.0 |
Inputs
| Argument Name | Description |
|---|---|
| incident_id | Incident ID |
| domain_tags | Array of tags in the form of [{‘label’: ‘tag1’},{‘label’: ‘tag2’},{‘label’: ‘tag3’}] |
| malicious_tags | Comma-seperated value of malicious tags to check. tag1,tag2,tag3 |
Outputs
There are no outputs for this script.
args: - default: false description: Incident ID. isArray: false name: incident_id required: true secret: false - default: false description: 'Array of tags in the form of [{''label'': ''tag1''},{''label'': ''tag2''},{''label'': ''tag3''}].' isArray: true name: domain_tags required: true secret: false - default: false description: Comma-seperated value of malicious tags to check. tag1,tag2,tag3. isArray: false name: malicious_tags required: true secret: false comment: Check DomainTools domain tags and if a tag is found mark incident as high severity. commonfields: id: CheckTags version: -1 enabled: false name: CheckTags script: '-' system: false tags: - DomainTools timeout: '0' type: python subtype: python3 fromversion: 6.6.0 dockerimage: demisto/python3:3.12.13.10116658 tests: - No tests (auto formatted)