Connectors Reference

HYAS Insight

HYAS Insight integration to Microsoft Azure Sentinel provides direct, high volume access to HYAS Insight data. It enables investigators and analysts to understand and defend against cyber adversaries and their infrastructure.

 

Status: Preview

Tier: Premium

Version: 1.0

 

Actions:

Name

Summary

SINKHOLE (SINKHOLEParameterBody body)

Retrieve Sinkhole information for IP address

IPV4_DEVICE_GEO (IPV4_DEVICE_GEOParameterBody body)

Retrieve Device Geo information for IPv4 address

DOMAIN_PASSIVE_DNS (DOMAIN_PASSIVE_DNSParameterBody body)

Retrieve Passive DNS information for domain

IP_DYNAMIC_DNS (IP_DYNAMIC_DNSParameterBody body)

Retrieve Dynamic DNS information for IP address

PASSIVE_HASH (PASSIVE_HASHParameterBody body)

Retrieve Passive Hash information for IP address

SSL_CERTIFICATE (SSL_CERTIFICATEParameterBody body)

Retrieve SSL certificate information for IP address

DOMAIN_WHOIS_CURRENT (DOMAIN_WHOIS_CURRENTParameterBody body)

Retrieve Current WHOIS information for domain

IPV6_DEVICE_GEO (IPV6_DEVICE_GEOParameterBody body)

Retrieve Device Geo information for IPv6 address

IP_PASSIVE_DNS (IP_PASSIVE_DNSParameterBody body)

Retrieve Passive DNS information for IP address

EMAIL_DYNAMIC_DNS (EMAIL_DYNAMIC_DNSParameterBody body)

Retrieve Dynamic DNS information for email address

DOMAIN_WHOIS_HISTORIC (DOMAIN_WHOIS_HISTORICParameterBody body)

Retrieve Historic WHOIS information for domain

EMAIL_WHOIS_HISTORIC (EMAIL_WHOIS_HISTORICParameterBody body)

Retrieve Historic WHOIS information for email address

PHONE_WHOIS_HISTORIC (PHONE_WHOIS_HISTORICParameterBody body)

Retrieve Historic WHOIS information for phone number

 

Triggers:

Name

Summary

 

Objects:

Name

Summary

DOMAIN_PASSIVE_DNSParameterBody

 

DOMAIN_PASSIVE_DNSResponseItem

 

DOMAIN_WHOIS_CURRENTParameterBody

 

DOMAIN_WHOIS_CURRENTResponse

 

DOMAIN_WHOIS_HISTORICParameterBody

 

DOMAIN_WHOIS_HISTORICResponseItem

 

EMAIL_DYNAMIC_DNSParameterBody

 

EMAIL_DYNAMIC_DNSResponseItem

 

EMAIL_WHOIS_HISTORICParameterBody

 

EMAIL_WHOIS_HISTORICResponseItem

 

IPV4_DEVICE_GEOParameterBody

 

IPV4_DEVICE_GEOResponseItem

 

IPV6_DEVICE_GEOParameterBody

 

IPV6_DEVICE_GEOResponseItem

 

IP_DYNAMIC_DNSParameterBody

 

IP_DYNAMIC_DNSResponseItem

 

IP_PASSIVE_DNSParameterBody

 

IP_PASSIVE_DNSResponseItem

 

PASSIVE_HASHParameterBody

 

PASSIVE_HASHResponseItem

 

PHONE_WHOIS_HISTORICParameterBody

 

PHONE_WHOIS_HISTORICResponseItem

 

SINKHOLEParameterBody

 

SINKHOLEResponseItem

 

SSL_CERTIFICATEParameterBody

 

SSL_CERTIFICATEResponse

 

 

Actions:

SINKHOLE

Summary: Retrieve Sinkhole information for IP address

Description: Retrieve Sinkhole enrichment data for IP address.

 

Syntax:

HYASInsight.SINKHOLE (SINKHOLEParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

SINKHOLEParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (SINKHOLEResponseItem)

 

IPV4_DEVICE_GEO

Summary: Retrieve Device Geo information for IPv4 address

Description: Retrieve Device Geo enrichment data for IPv4 address.

 

Syntax:

HYASInsight.IPV4_DEVICE_GEO (IPV4_DEVICE_GEOParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

IPV4_DEVICE_GEOParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (IPV4_DEVICE_GEOResponseItem)

 

DOMAIN_PASSIVE_DNS

Summary: Retrieve Passive DNS information for domain

Description: Retrieve Passive DNS enrichment data for domain.

 

Syntax:

HYASInsight.DOMAIN_PASSIVE_DNS (DOMAIN_PASSIVE_DNSParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

DOMAIN_PASSIVE_DNSParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (DOMAIN_PASSIVE_DNSResponseItem)

 

IP_DYNAMIC_DNS

Summary: Retrieve Dynamic DNS information for IP address

Description: Retrieve Dynamic DNS enrichment data for IP address.

 

Syntax:

HYASInsight.IP_DYNAMIC_DNS (IP_DYNAMIC_DNSParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

IP_DYNAMIC_DNSParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (IP_DYNAMIC_DNSResponseItem)

 

PASSIVE_HASH

Summary: Retrieve Passive Hash information for IP address

Description: Retrieve Passive Hash enrichment data for IP address.

 

Syntax:

HYASInsight.PASSIVE_HASH (PASSIVE_HASHParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

PASSIVE_HASHParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (PASSIVE_HASHResponseItem)

 

SSL_CERTIFICATE

Summary: Retrieve SSL certificate information for IP address

Description: Retrieve SSL certificate enrichment data for IP address.

 

Syntax:

HYASInsight.SSL_CERTIFICATE (SSL_CERTIFICATEParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

SSL_CERTIFICATEParameterBody

 

 

True

 

Returns:

††††††††† Type:SSL_CERTIFICATEResponse

 

DOMAIN_WHOIS_CURRENT

Summary: Retrieve Current WHOIS information for domain

Description: Retrieve Current WHOIS enrichment data for domain.

 

Syntax:

HYASInsight.DOMAIN_WHOIS_CURRENT (DOMAIN_WHOIS_CURRENTParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

DOMAIN_WHOIS_CURRENTParameterBody

 

 

True

 

Returns:

††††††††† Type:DOMAIN_WHOIS_CURRENTResponse

 

IPV6_DEVICE_GEO

Summary: Retrieve Device Geo information for IPv6 address

Description: Retrieve Device Geo enrichment data for IPv6 address.

 

Syntax:

HYASInsight.IPV6_DEVICE_GEO (IPV6_DEVICE_GEOParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

IPV6_DEVICE_GEOParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (IPV6_DEVICE_GEOResponseItem)

 

IP_PASSIVE_DNS

Summary: Retrieve Passive DNS information for IP address

Description: Retrieve Passive DNS enrichment data for IP address.

 

Syntax:

HYASInsight.IP_PASSIVE_DNS (IP_PASSIVE_DNSParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

IP_PASSIVE_DNSParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (IP_PASSIVE_DNSResponseItem)

 

EMAIL_DYNAMIC_DNS

Summary: Retrieve Dynamic DNS information for email address

Description: Retrieve Dynamic DNS enrichment data for email address.

 

Syntax:

HYASInsight.EMAIL_DYNAMIC_DNS (EMAIL_DYNAMIC_DNSParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

EMAIL_DYNAMIC_DNSParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (EMAIL_DYNAMIC_DNSResponseItem)

 

DOMAIN_WHOIS_HISTORIC

Summary: Retrieve Historic WHOIS information for domain

Description: Retrieve Historic WHOIS enrichment data for domain.

 

Syntax:

HYASInsight.DOMAIN_WHOIS_HISTORIC (DOMAIN_WHOIS_HISTORICParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

DOMAIN_WHOIS_HISTORICParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (DOMAIN_WHOIS_HISTORICResponseItem)

 

EMAIL_WHOIS_HISTORIC

Summary: Retrieve Historic WHOIS information for email address

Description: Retrieve Historic WHOIS enrichment data for email address.

 

Syntax:

HYASInsight.EMAIL_WHOIS_HISTORIC (EMAIL_WHOIS_HISTORICParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

EMAIL_WHOIS_HISTORICParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (EMAIL_WHOIS_HISTORICResponseItem)

 

PHONE_WHOIS_HISTORIC

Summary: Retrieve Historic WHOIS information for phone number

Description: Retrieve Historic WHOIS enrichment data for phone number.

 

Syntax:

HYASInsight.PHONE_WHOIS_HISTORIC (PHONE_WHOIS_HISTORICParameterBody body)

 

Parameters:

Name

Type

Summary

Required

Related Action

body

PHONE_WHOIS_HISTORICParameterBody

 

 

True

 

Returns:

††††††††† Type:array of (PHONE_WHOIS_HISTORICResponseItem)

 


 

DOMAIN_PASSIVE_DNSParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

domain

string

 

Domain you want to enrich.

 


 

DOMAIN_PASSIVE_DNSResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

cert_name

string

 

The certificate provider name.

count

integer(int32)

 

The passive dns count.

domain

string

 

The domain of the passive dns information requested.

first_seen

string

 

The first time this domain was seen.

ip

Ip

 

The ip object.

ipv4

string

 

The ipv4 address of the passive dns record.

ipv6

string

 

The ipv6 address of the passive dns record.

last_seen

string

 

The last time this domain was seen.

sha1

string

 

The sha1.

sources

array of (string)

 

A list of pDNS providers which the data came from.

 

Ip

Summary:

Description: The ip object.

 

††††††††† Properties:

Name

Type

Summary

geo

Geo

 

The geo object.

ip

string

 

IP of the organization.

isp

Isp

 

The isp object.

 

Geo

Summary:

Description: The geo object.

 

††††††††† Properties:

Name

Type

Summary

city_name

string

 

City of the ip organization.

country_iso_code

string

 

Country ISO code of the ip organization.

country_name

string

 

Country name of the ip organization.

location_latitude

string

 

The latitude of the ip organization.

location_longitude

string

 

The longitude of the ip organization.

postal_code

string

 

The postalcode of the ip organization.

 

Isp

Summary:

Description: The isp object.

 

††††††††† Properties:

Name

Type

Summary

autonomous_system_number

string

 

The ASN of the ip.

autonomous_system_organization

string

 

The ASO of the ip.

ip_address

string

 

The IP.

isp

string

 

The Internet Service Provider.

organization

string

 

The ISP organization.

 


 

DOMAIN_WHOIS_CURRENTParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

domain

string

 

Domain you want to enrich.

current

boolean

 

current.

 


 

DOMAIN_WHOIS_CURRENTResponse

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

items

array of (ItemsItem)

 

The items object.

source

string

 

The source information.

total_count

integer(int32)

 

The total count information.

 

ItemsItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

abuse_emails

array of (string)

 

The abuse emails information.

address

array of (string)

 

The address information.

city

array of (string)

 

The city of the registrant.

country

array of (string)

 

The country of the registrant.

data

string

 

The data information.

datetime

string

 

The datetime information.

domain

string

 

The domain of the registrant.

domain_2tld

string

 

The second-level domain of the registrant.

domain_created_datetime

string

 

The date and time when the Whois record was created.

domain_expires_datetime

string

 

The date and time when the Whois record expires.

domain_updated_datetime

string

 

The date and time when the Whois record was last updated.

email

array of (string)

 

The email information.

idn_name

string

 

The international domain name information.

meta_data

string

 

The metadata information.

name

array of (string)

 

The contact name (registrant contact, administrative contact, technical contact, or abuse contact.)

nameserver

array of (string)

 

The nameserver domain.

organization

array of (string)

 

The organization information.

phone

array of (string)

 

The phone number of the registrant in e164 format.

registrar

string

 

The domain registrar.

state

array of (string)

 

The state where domain was registered.

whois_hash

string

 

The hash information.

whois_id

string

 

The whois id information.

whois_nameserver

array of (Whois_nameserverItem)

 

The whois_nameserver object.

whois_pii

array of (Whois_piiItem)

 

The whois_pii object.

 

Whois_nameserverItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

domain

string

 

The nameserverís domain information.

domain_2tld

string

 

The nameserverís domain_2tld information.

whois_related_nameserver_id

string

 

The nameserverís Id Information.

 

Whois_piiItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

address

string

 

The personal identity address information.

city

string

 

The personal identity city information.

data

string

 

The personal identity data information.

email

string

 

The personal identity email information.

geo_country_alpha_2

string

 

The personal identity country information.

name

string

 

The personal identity name information.

organization

string

 

The personal identity organization information.

phone_e164

string

 

The personal identity Phone_e164 information.

state

string

 

The personal identity state information.

whois_related_pii_id

string

 

The personal identity Id information.

whois_related_type

string

 

The personal identity related information.

 


 

DOMAIN_WHOIS_HISTORICParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

domain

string

 

Domain you want to enrich.

 


 

DOMAIN_WHOIS_HISTORICResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

address

array of (string)

 

The address information.

city

array of (string)

 

The city information.

country

array of (string)

 

The country information.

data

string

 

The data information.

datetime

string

 

The datetime information.

domain

string

 

The domain of the registrant.

domain_2tld

string

 

The second-level domain of the registrant.

domain_created_datetime

string

 

The date and time when the whois record was created.

domain_expires_datetime

string

 

The date and time when the whois record expires.

domain_updated_datetime

string

 

The date and time when the whois record was last updated.

email

array of (string)

 

The email information.

idn_name

string

 

The international domain name.

meta_data

string

 

The metadata information.

name

array of (string)

 

The name information.

nameserver

array of (string)

 

The nameserver information.

phone

array of (PhoneItem)

 

Array of object, The phone number registrant contact in e164 format† along with geo info.

registrar

string

 

The domain registrar.

whois_hash

string

 

The hash information.

whois_id

string

 

The whois id information.

 

PhoneItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

phone

string

 

The phone number registrant contact in e164 format.

phone_info

Phone_info

 

The phone_info† object.

 

Phone_info

Summary:

Description: The phone_info† object.

 

††††††††† Properties:

Name

Type

Summary

carrier

string

 

Phone number carrier.

country

string

 

Phone number country.

geo

string

 

Phone number geo Can be city or province or region or country.

 


 

EMAIL_DYNAMIC_DNSParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

email

string

 

Email address you want to enrich.

 


 

EMAIL_DYNAMIC_DNSResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

a_record

string

 

The A record for the domain.

account

string

 

The account holder name.

created

string

 

The date which the domain was created.

created_ip

string

 

The ip address of the account holder.

domain

string

 

The domain associated with the dynamic dns information.

domain_creator_ip

string

 

The ip address of the domain creator.

email

string

 

The email address connected to the domain.


 

EMAIL_WHOIS_HISTORICParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

email

string

 

Email address you want to enrich.

 


 

EMAIL_WHOIS_HISTORICResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

address

array of (string)

 

The address information.

city

array of (string)

 

The city information.

country

array of (string)

 

The country information.

data

string

 

The data information.

datetime

string

 

The datetime information.

domain

string

 

The domain of the registrant.

domain_2tld

string

 

The second-level domain of the registrant.

domain_created_datetime

string

 

The date and time when the whois record was created.

domain_expires_datetime

string

 

The date and time when the whois record expires.

domain_updated_datetime

string

 

The date and time when the whois record was last updated.

email

array of (string)

 

The email information.

idn_name

string

 

The international domain name.

meta_data

string

 

The metadata information.

name

array of (string)

 

The name information.

nameserver

array of (string)

 

The nameserver information.

phone

array of (PhoneItem)

 

Array of object, The phone number registrant contact in e164 format† along with geo info.

registrar

string

 

The domain registrar.

whois_hash

string

 

The hash information.

whois_id

string

 

The whois id information.

 

PhoneItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

phone

string

 

The phone number registrant contact in e164 format.

phone_info

Phone_info

 

The phone_info object.

 

Phone_info

Summary:

Description: The phone_info object.

 

††††††††† Properties:

Name

Type

Summary

carrier

string

 

Phone number carrier.

country

string

 

Phone number country.

geo

string

 

Phone number geo Can be city or province or region or country.

 


 

IPV4_DEVICE_GEOParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

ipv4

string

 

IPv4 address you want to enrich.

 


 

IPV4_DEVICE_GEOResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

datetime

string

 

A date-time string in RFC 3339 format.

device_geo_id

string

 

Internal record ID.

device_user_agent

string

 

The user agent string for the device.

geo_country_alpha_2

string

 

The ISO 3316 alpha-2 code for the country associated with the lat/long reported.

geo_horizontal_accuracy

number(float)

 

The GPS horizontal accuracy.

ipv4

string

 

The ipv4 address assigned to the device. A device may have either or ipv4 and ipv6.

ipv6

string

 

The ipv6 address assigned to the device. A device may have either or ipv4 and ipv6.

latitude

number(float)

 

Units are degrees on the WGS 84 spheroid.

longitude

number(float)

 

Units are degrees on the WGS 84 spheroid.

wifi_bssid

string

 

The BSSID (MAC address) of the wifi router that the device communicated through.


 

IPV6_DEVICE_GEOParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

ipv6

string

 

IPv6 address you want to enrich.

 


 

IPV6_DEVICE_GEOResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

datetime

string

 

A date-time string in RFC 3339 format.

device_geo_id

string

 

Internal record ID.

device_user_agent

string

 

The user agent string for the device.

geo_country_alpha_2

string

 

The ISO 3316 alpha-2 code for the country associated with the lat/long reported.

geo_horizontal_accuracy

number(float)

 

The GPS horizontal accuracy.

ipv4

string

 

The ipv4 address assigned to the device. A device may have either or ipv4 and ipv6.

ipv6

string

 

The ipv6 address assigned to the device. A device may have either or ipv4 and ipv6.

latitude

number(float)

 

Units are degrees on the WGS 84 spheroid.

longitude

number(float)

 

Units are degrees on the WGS 84 spheroid.

wifi_bssid

string

 

The BSSID (MAC address) of the wifi router that the device communicated through.


 

IP_DYNAMIC_DNSParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

ip

string

 

IPv4 address you want to enrich.

 


 

IP_DYNAMIC_DNSResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

a_record

string

 

The A record for the domain.

account

string

 

The account holder name.

created

string

 

The date which the domain was created.

created_ip

string

 

The ip address of the account holder.

domain

string

 

The domain associated with the dynamic dns information.

domain_creator_ip

string

 

The ip address of the domain creator.

email

string

 

The email address connected to the domain.


 

IP_PASSIVE_DNSParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

ipv4

string

 

IPv4 address you want to enrich.

 


 

IP_PASSIVE_DNSResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

cert_name

string

 

The certificate provider name.

count

integer(int32)

 

The passive dns count.

domain

string

 

The domain of the passive dns information requested.

first_seen

string

 

The first time this domain was seen.

ip

Ip

 

The ip object.

ipv4

string

 

The ipv4 address of the passive dns record.

ipv6

string

 

The ipv6 address of the passive dns record.

last_seen

string

 

The last time this domain was seen.

sha1

string

 

The sha1.

sources

array of (string)

 

A list of pDNS providers which the data came from.

 

Ip

Summary:

Description: The ip object.

 

††††††††† Properties:

Name

Type

Summary

geo

Geo

 

The geo object.

ip

string

 

IP of the organization.

isp

Isp

 

The isp object.

 

Geo

Summary:

Description: The geo object.

 

††††††††† Properties:

Name

Type

Summary

city_name

string

 

City of the ip organization.

country_iso_code

string

 

Country ISO code of the ip organization.

country_name

string

 

Country name of the ip organization.

location_latitude

string

 

The latitude of the ip organization.

location_longitude

string

 

The longitude of the ip organization.

postal_code

string

 

The postalcode of the ip organization.

 

Isp

Summary:

Description: The isp object.

 

††††††††† Properties:

Name

Type

Summary

autonomous_system_number

string

 

The ASN of the ip.

autonomous_system_organization

string

 

The ASO of the ip.

ip_address

string

 

The IP.

isp

string

 

The Internet Service Provider.

organization

string

 

The ISP organization.

 


 

PASSIVE_HASHParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

ipv4

string

 

IPv4 address you want to enrich.

 


 

PASSIVE_HASHResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

domain

string

 

The domain of the passive hash information requested.

md5_count

integer(int32)

 

The malware hash count related to the domain.


 

PHONE_WHOIS_HISTORICParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

phone

string

 

Phone number you want to enrich. ( e164 format. Eg: ( +41585855634 ) )

 


 

PHONE_WHOIS_HISTORICResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

address

array of (string)

 

The address information.

city

array of (string)

 

The city information.

country

array of (string)

 

The country information.

data

string

 

The data information.

datetime

string

 

The datetime information.

domain

string

 

The domain of the registrant.

domain_2tld

string

 

The second-level domain of the registrant.

domain_created_datetime

string

 

The date and time when the whois record was created.

domain_expires_datetime

string

 

The date and time when the whois record expires.

domain_updated_datetime

string

 

The date and time when the whois record was last updated.

email

array of (string)

 

The email information

idn_name

string

 

The international domain name.

meta_data

string

 

The metadata information.

name

array of (string)

 

The name information.

nameserver

array of (string)

 

The nameserver information.

phone

array of (PhoneItem)

 

Array of object, The phone number registrant contact in e164 format along with geo info.

registrar

string

 

The domain registrar.

whois_hash

string

 

The hash information.

whois_id

string

 

The whois id information.

 

PhoneItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

phone

string

 

The phone number registrant contact in e164 format.

phone_info

Phone_info

 

The phone_info object.

 

Phone_info

Summary:

Description: The phone_info object.

 

††††††††† Properties:

Name

Type

Summary

carrier

string

 

Phone number carrier.

country

string

 

Phone number country.

geo

string

 

Phone number geo Can be city or province or region or country.

 


 

SINKHOLEParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

ipv4

string

 

IPv4 address you want to enrich.

 


 

SINKHOLEResponseItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

count

integer(int32)

 

The sinkhole count.

country_name

string

 

The country of the ip.

data_port

integer(int32)

 

The data port.

datetime

string

 

The first seen date of the sinkhole.

ipv4

string

 

The ipv4 of the sinkhole.

last_seen

string

 

The last seen date of the sinkhole.

organization_name

string

 

The isp organization for the ip.

sink_source

string

 

The ipv4 of the sink source.


 

SSL_CERTIFICATEParameterBody

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

applied_filters

Applied_filters

 

Request body (application/json).

 

Applied_filters

Summary:

Description: Request body (application/json).

 

††††††††† Properties:

Name

Type

Summary

ip

string

 

IPv4 address you want to enrich.

 


 

SSL_CERTIFICATEResponse

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

related_count

integer(int32)

 

The number of ip addresses connected to this certificate.

ssl_certs

array of (Ssl_certsItem)

 

The ssl_certs object.

 

Ssl_certsItem

Summary:

Description:

 

††††††††† Properties:

Name

Type

Summary

ip

string

 

The ip address associated with certificate.

ssl_cert

Ssl_cert

 

The ssl_cert object.

 

Ssl_cert

Summary:

Description: The ssl_cert object.

 

††††††††† Properties:

Name

Type

Summary

cert_key

string

 

The certificate key (sha1).

expire_date

string

 

The expiry date of the certificate.

issue_date

string

 

The issue date of the certificate.

issuer_commonName

string

 

The common name that the certificate was issued from.

issuer_countryName

string

 

The country ISO the certificate was issued from.

issuer_localityName

string

 

The city where the issuer company is legally located.

issuer_organizationName

string

 

The organization name that issued the certificate.

issuer_organizationalUnitName

string

 

The organization unit name that issued the certificate.

issuer_stateOrProvinceName

string

 

The issuer state or province.

md5

string

 

The certificate MD5.

serial_number

number(float)

 

The certificate serial number.

sha1

string

 

The certificate sha1.

sha_256

string

 

The certificate sha256.

sig_algo

string

 

The certificate signature algorithm.

signature

array of (string)

 

Signature split into multiple lines.

ssl_version

integer(int32)

 

The SSL version.

subject_commonName

string

 

The subject name that the certificate was issued to.

subject_countryName

string

 

The country the certificate was issued to.

subject_localityName

string

 

The city where the subject company is legally located.

subject_organizationName

string

 

The organization name that recieved the certificate.

subject_organizationalUnitName

string

 

The organization unit name that recieved the certificate.

subject_stateOrProvinceName

string

 

The state or province name where the subject company is located.

timestamp

string

 

The certificate date and time.