IsInternalHostName

Checks if the supplied hostnames match either the organization's internal naming convention or the domain suffix.

Details

ID	`IsInternalHostName`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10404775`
Tags	Utility

README

Checks if the supplied hostnames match either the organization’s internal naming convention or the domain suffix.

Script Data

Name	Description
Script Type	python3
Tags	Utility
Cortex XSOAR Version	5.0.0

Used In

This script is used in the following playbooks and scripts.

Logz.io Indicator Hunting
Palo Alto Networks - Hunting And Threat Detection
Splunk Indicator Hunting

Inputs

Argument Name	Description
hostName	A comma-separated list of hostnames to check.
internalRegex	The regex pattern for the organization’s hostname for example \w\w\w\d$\|\w\w\w$. for hosts that look like pcx1 or pcx.
domainName	The domain name for the organization. For a single domain use this format: “bla.com”. For multiple domains use this format: (bla.com\|blabla.com), where the pipe and the brackets are the OR condition for regex.

Outputs

Path	Description	Type
Endpoint.Hostname	The hostname.	string
Endpoint.IsInternal	Whether the supplied hostnames match the organization’s naming convention. Can be “true” or “false”.	string

Source

IsInternalHostName.py IsInternalHostName.yml

Download History Raw

commonfields:
  id: IsInternalHostName
  version: -1
name: IsInternalHostName
script: ''
type: python
fromversion: 5.0.0
tags:
- Utility
comment: Checks if the supplied hostnames match either the organization's internal naming convention or the domain suffix.
enabled: true
args:
- name: hostName
  required: true
  default: true
  description: A comma-separated list of hostnames to check.
  isArray: true
- name: internalRegex
  description: The regex pattern for the organization's hostname for example \w\w\w\d$|\w\w\w$. for hosts that look like pcx1 or pcx.
- name: domainName
  required: true
  description: 'The domain name for the organization. For a single domain use this format: "bla.com". For multiple domains use this format: (bla.com|blabla.com), where the pipe and the brackets are the OR condition for regex.'
outputs:
- contextPath: Endpoint.Hostname
  description: The hostname.
  type: string
- contextPath: Endpoint.IsInternal
  description: Whether the supplied hostnames match the organization's naming convention. Can be "true" or "false".
  type: string
scripttarget: 0
subtype: python3
runas: DBotWeakRole
tests:
- IsInternalHostName Test
dockerimage: demisto/python3:3.12.13.10404775