Generic Reputation Commands
Background and motivation
XSOAR has an abudance of integrations with reputation providers for example VirusTotal, AlienVault OTX, MISP etc. Every Integration that returns a reputation about an indicator must implement the generic repuation commands and calculate DBot Score
Generic reputation commands
file file=
Description: Runs reputation on files.
- name: file
arguments:
- name: file
default: true
description: List of Files.
isArray: true
ip ip=
- name: ip
arguments:
- name: ip
default: true
description: List of IPs.
isArray: true
Description: Runs reputation on IPs.
url url=
Description: Runs reputation on URLs.
- name: url
arguments:
- name: url
default: true
description: List of URLs.
isArray: true
domain domain=
Description: Runs reputation on Domains.
- name: domain
arguments:
- name: domain
default: true
description: List of Domains.
isArray: true
email email=
Description: Runs reputation on Emails.
- name: email
arguments:
- name: email
default: true
description: List of emails.
isArray: true
cve cve=
Description: Runs reputation on CVEs.
- name: cve
arguments:
- name: cve
default: true
description: List of CVEs.
isArray: true