URLVoid SOAR Integration¶
Overview¶
This document outlines the tools available for the URLVoid integration within the SOAR platform. These tools allow interaction with the URLVoid API for testing connectivity and checking domain reputation against various blacklists.
Tools¶
url_void_ping
¶
Test Connectivity.
Parameters:
case_id
(str, required): The ID of the case.alert_group_identifiers
(List[str], required): Identifiers for the alert groups.target_entities
(List[TargetEntity], optional, default=None): Optional list of specific target entities (Identifier, EntityType) to run the action on.scope
(str, optional, default=“All entities”): Defines the scope for the action.
url_void_get_domain_reputation
¶
Check if a domain is blacklisted by popular and trusted domain blacklist services.
Parameters:
case_id
(str, required): The ID of the case.alert_group_identifiers
(List[str], required): Identifiers for the alert groups.threshold
(str, required): Domain risk threshold.target_entities
(List[TargetEntity], optional, default=None): Optional list of specific target entities (Identifier, EntityType) to run the action on.scope
(str, optional, default=“All entities”): Defines the scope for the action.