Malware Domain List¶
Overview¶
This integration provides tools to interact with the Malware Domain List database, allowing you to check URLs against known malicious domains.
Available Tools¶
Ping¶
Tool Name: malware_domain_list_ping
Description: Test Connectivity
Arguments:
case_id(string, required): The ID of the case.alert_group_identifiers(List[string], required): Identifiers for the alert groups.target_entities(List[TargetEntity], optional): Optional list of specific target entities (Identifier, EntityType) to run the action on. Defaults to empty list.scope(string, optional): Defines the scope for the action. Defaults to “All entities”.
Returns:
dict: A dictionary containing the result of the action execution.
Check URL¶
Tool Name: malware_domain_list_check_url
Description: This action fetches a URL and searches for it in the Malware Domain list database
Arguments:
case_id(string, required): The ID of the case.alert_group_identifiers(List[string], required): Identifiers for the alert groups.target_entities(List[TargetEntity], optional): Optional list of specific target entities (Identifier, EntityType) to run the action on. Typically runs on URL entities. Defaults to empty list.scope(string, optional): Defines the scope for the action. Defaults to “All entities”.
Returns:
dict: A dictionary containing the result of the action execution, indicating if the URL was found in the database and associated details.