abuseipdb

AbuseIPDB

virustotal

VirusTotal

urlscan

URLScan.io

ip2locationio

ip2location.io

A composite Flowpipe mod that lookup IOCS in VirusTotal, Urlscan and other tools.

lookup-iocs

A composite Flowpipe mod that lookup a domain in VirusTotal, Urlscan and other tools.

lookup_iocs.pipeline.lookup_domain

lookup_domain

virustotal.default

Name of VirusTotal connection to use. If not provided, the default VirusTotal connection will be used.

virustotal_conn

urlscan.default

Name of URL Scan connection to use. If not provided, the default URL Scan connection will be used.

urlscan_conn

domain

urlhaus_domain_lookup

virustotal_domain_lookup

urlscan_domain_lookup

pulsedive_domain_lookup

Lookup Domain In Different Tools

A composite Flowpipe mod that lookup email in VirusTotal, Urlscan and other tools.

lookup_iocs.pipeline.lookup_email

lookup_email

API key to authenticate requests with Hunter.

hunter_api_key

API key to authenticate requests with Kickbox.

kickbox_api_key

email

hunter_email_verify_status

kickbox_email_verify_status

Lookup Email In Different Tools

A composite Flowpipe mod that lookup a file hash in VirusTotal, Urlscan and other tools.

lookup_iocs.pipeline.lookup_file_hash

lookup_file_hash

API key to authenticate requests with Hybrid Analysis.

hybrid_analysis_api_key

file_hash

virustotal_file_hash_lookup

urlscan_file_hash_lookup

hybrid_analysis_file_hash_lookup

Lookup File hash In Different Tools

A composite Flowpipe mod that lookup IOCs in VirusTotal, Urlscan and other tools.

lookup_iocs.pipeline.lookup_iocs

lookup_iocs

API key to authenticate requests with APIVoid.

apivoid_api_key

iocs

domain_lookup

email_lookup

file_hash_lookup

ip_lookup

url_lookup

Lookup IOCs In Different Tools

A composite Flowpipe mod that lookup an IP in VirusTotal, Urlscan and other tools.

lookup_iocs.pipeline.lookup_ip

lookup_ip

abuseipdb.default

Name of AbuseIPDB connection to use. If not provided, the default AbuseIPDB connection will be used.

abuseipdb_conn

ip2locationio.default

Name of IP2Locationio connection to use. If not provided, the default IP2Locationio connection will be used.

ip2locationio_conn

ip_address

Maximum age in days for the AbuseIPDB reports to retrieve. Defaults to 30 days.

max_age_in_days

abuseipdb_ip_info

abuseipdb_reports

ip2locationio_ip_lookup

urlscan_ip_lookup

Lookup IP In Different Tools

A composite Flowpipe mod that lookup an url in VirusTotal, Urlscan and other tools.

Pipelines