basic search reports by ip
ip
| Argument Name | Description | Required |
|---|---|---|
| ip | ip to search by. | Required |
| Path | Type | Description |
|---|---|---|
| DBotScore.Indicator | unknown | The indicator we tested |
| DBotScore.Type | unknown | The type of the indicator |
| DBotScore.Vendor | unknown | Vendor used to calculate the score |
| DBotScore.Score | unknown | The actual score |
| IP.Address | unknown | The IP address |
| Report.ID | unknown | Report ID |
| Report.title | unknown | Report title |
| Report.publishDate | unknown | Report publish date |
| Report.intelligenceType | unknown | Report intelligence type (overview, vulnerability, malware, threat) |
basic search reports by domain.
Notice: Submitting indicators using this command might make the indicator data publicly available. See the vendor’s documentation for more details.
domain
| Argument Name | Description | Required |
|---|---|---|
| domain | domain to search by. | Required |
| Path | Type | Description |
|---|---|---|
| DBotScore.Indicator | unknown | The indicator we tested |
| DBotScore.Type | unknown | The type of the indicator |
| DBotScore.Vendor | unknown | Vendor used to calculate the score |
| DBotScore.Score | unknown | The actual score |
| Domain.Name | unknown | The domain name. |
| Report.ID | unknown | Report ID |
| Report.title | unknown | Report title |
| Report.publishDate | unknown | Report publish date |
| Report.intelligenceType | unknown | Report intelligence type (overview, vulnerability, malware, threat) |
basic search file report by md5/sha1. NOTE - specify only one of md5/sha1 arguments
file
| Argument Name | Description | Required |
|---|---|---|
| file | md5 or sha1 to search by. | Optional |
| Path | Type | Description |
|---|---|---|
| DBotScore.Indicator | unknown | The indicator we tested |
| DBotScore.Type | unknown | The type of the indicator |
| DBotScore.Vendor | unknown | Vendor used to calculate the score |
| DBotScore.Score | unknown | The actual score |
| Report.ID | unknown | Report ID |
| Report.title | unknown | Report title |
| Report.publishDate | unknown | Report publish date |
| Report.intelligenceType | unknown | Report intelligence type (overview, vulnerability, malware, threat) |
Get specific report
isight-get-report
| Argument Name | Description | Required |
|---|---|---|
| reportID | Report ID to search by. | Required |
| Path | Type | Description |
|---|---|---|
| Report.ID | unknown | Report ID |
| Report.title | unknown | Report title |
| Report.publishDate | unknown | Report publish date |
| Report.intelligenceType | unknown | Report intelligence type (overview, vulnerability, malware, threat) |
| Report.audience | unknown | Report audience |
| Report.ThreatScape | unknown | Report threat scape |
| Report.operatingSystems | unknown | Report operating systems |
| Report.riskRating | unknown | Report risk rating |
| Report.version | unknown | Report version |
| Report.tagSection | unknown | Report tag section |
Submission of malware and other files for community sharing
isight-submit-file
| Argument Name | Description | Required |
|---|---|---|
| entryID | entry-id of the file to submit (e.g. 41@18). | Required |
| description | file description. | Required |
| type | Type of the given file. Possible values are: malware, other. | Required |
There is no context output for this command.