Umbrella Investigate API Logo

Umbrella Investigate API

0
Free
Visit Website

Umbrella Investigate provides an API that allows querying for: Domain categorization, Security information about a domain, Co-occurrences for a domain, Related domains for a domain, Domains related to an IP, Domain tagging dates for a domain, DNS RR history for a domain, WHOIS information, WHOIS information for an email, WHOIS information for a nameserver, Historical WHOIS information for a domain, Latest malicious domains for an IP. To use the Investigate API wrapper import InvestigateApi class from threat_intel.opendns module: from threat_intel.opendns import InvestigateApi. To initialize the API wrapper you need the API key: investigate = InvestigateApi("<INVESTIGATE-API-KEY-HERE>"). You can also specify a file name where the API responses will be cached in a JSON file, to save you the bandwidth for the multiple calls about the same domains or IPs: investigate = InvestigateApi("<INVESTIGATE-API-KEY-HERE>", cache_file_name="/tmp/cache.opendns.json"). Domain categorization Calls domains/categorizat

FEATURES

ALTERNATIVES

YARA signature and IOC database for LOKI and THOR Lite scanners with high quality rules and IOCs.

A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.

Real-time, container-based file scanning system for threat hunting and incident response.

A parsing tool for Yara Scan Service's JSON output file to help maximize benefits and automate parsing of Yara Scan Service results.

A library of adversary emulation plans to evaluate defensive capabilities against real-world threats.

A threat intelligence dissemination layer for open-source security tools with STIX-2 support and plugin-based architecture.

A Linux distribution designed for threat emulation and threat hunting, integrating attacker and defender tools for identifying threats in your environment.

Utilize Jupyter Notebooks to enhance threat hunting capabilities by focusing on different threat categories or stages.