Skip to main content

SecurityTrails

This Integration is part of the SecurityTrails Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

This integration provides API access to the SecurityTrails platform. This integration was integrated and tested with V1 of SecurityTrails

Configure SecurityTrails in Cortex#

ParameterRequired
API KeyTrue
Trust any certificate (not secure)False
Use system proxy settingsFalse
Fetch indicatorsFalse

Commands#

You can execute these commands from the CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

securitytrails-get-subdomains#


Returns child and sibling subdomains for a given hostname.

Notice: Submitting indicators using this command might make the indicator data publicly available. See the vendor’s documentation for more details.

Base Command#

securitytrails-get-subdomains

Input#

Argument NameDescriptionRequired
hostnameThe hostname.Required
children_onlyOnly return children subdomains. Possible values are: true, false. Default is true.Optional

Context Output#

PathTypeDescription
SecurityTrails.Domain.namestringHostname
SecurityTrails.Domain.subdomainsunknownSubdomains
Domain.NamestringDomain name
Domain.SubdomainsstringSubdomains
SecurityTrails.Domain.subdomain_countnumberSubdomain Count

Command Example#

#### Human Readable Output
### securitytrails-get-domain-details
***
Returns the current data about the given hostname. In addition to the current data, you also get the current statistics associated with a particular record. For example, for a records you'll get how many other hostnames have the same IP.
Notice: Submitting indicators using this command might make the indicator data publicly available. See the vendor’s documentation for more details.
#### Base Command
`securitytrails-get-domain-details`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| hostname | The hostname. | Required |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| SecurityTrails.Domain.name | string | Domain name |
| SecurityTrails.Domain.alexa_rank | number | Alexa rank |
| SecurityTrails.Domain.apex_domain | string | Apex domain |
| SecurityTrails.Domain.current_dns | unknown | Current DNS records |
| SecurityTrails.Domain.subdomain_count | number | Subdomain count |
| Domain.Name | string | Domain name |
| Domain.NameServers | string | Name servers |
#### Command Example

Human Readable Output#

securitytrails-get-tags#


Returns tags for a given hostname

Base Command#

securitytrails-get-tags

Input#

Argument NameDescriptionRequired
hostnameHostname.Required

Context Output#

PathTypeDescription
SecurityTrails.Domain.namestringDomain name
SecurityTrails.Domain.tagsunknownDomain tags
Domain.NamestringDomain name
Domain.TagsstringDomain tags

Command Example#

#### Human Readable Output
### securitytrails-get-company-details
***
Returns details for a company domain.
#### Base Command
`securitytrails-get-company-details`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| domain | Domain. | Required |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| SecurityTrails.Domain.name | string | Domain name |
| SecurityTrails.Domain.company | string | Company name |
| Domain.Name | string | Domain name |
| Domain.Organization | string | Organization |
| Domain.Registrant.Name | string | Domain registrant name |
| WHOIS.Registrant.Name | string | Domain registrant name |
#### Command Example

Human Readable Output#

securitytrails-get-company-associated-ips#


Returns associated IPs for a company domain. The data is based on whois data with the names matched to the domains.

Base Command#

securitytrails-get-company-associated-ips

Input#

Argument NameDescriptionRequired
domainDomain.Required

Context Output#

PathTypeDescription
SecurityTrails.Domain.namestringDomain name
SecurityTrails.Domain.assocaitedipsunknownAssociated IPs
SecurityTrails.Domain.assocaitedip_countnumberAssociated IP Count

Command Example#

#### Human Readable Output
### securitytrails-get-domain-whois
***
Returns the current WHOIS data about a given hostname with the stats merged together
#### Base Command
`securitytrails-get-domain-whois`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| hostname | Hostname. | Required |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| SecurityTrails.Domain.expiresDate | date | Expires date |
| SecurityTrails.Domain.nameServers | unknown | Name servers |
| SecurityTrails.Domain.updatedDate | date | Updated date |
| SecurityTrails.Domain.name | string | Domain name |
| SecurityTrails.Domain.status | string | Status |
| SecurityTrails.Domain.contacts.countryCode | string | Country code |
| SecurityTrails.Domain.contacts.organization_count | number | Organization count |
| SecurityTrails.Domain.contacts.telephone | string | Telephone |
| SecurityTrails.Domain.contacts.postalCode_count | number | Postal code count |
| SecurityTrails.Domain.contacts.fax_count | number | Fax count |
| SecurityTrails.Domain.contacts.street1 | string | Street 1 |
| SecurityTrails.Domain.contacts.state | string | State |
| SecurityTrails.Domain.contacts.organization | string | Organization |
| SecurityTrails.Domain.contacts.telephone_count | number | Telephone count |
| SecurityTrails.Domain.contacts.country | string | Country |
| SecurityTrails.Domain.contacts.postalCode | string | Postcode |
| SecurityTrails.Domain.contacts.type | string | Type |
| SecurityTrails.Domain.contacts.city_count | number | City count |
| SecurityTrails.Domain.contacts.name_count | number | Name count |
| SecurityTrails.Domain.contacts.email | string | Email |
| SecurityTrails.Domain.contacts.fax | string | Fax |
| SecurityTrails.Domain.contacts.street1_count | number | Street 1 count |
| SecurityTrails.Domain.private_registration | boolean | Private registration |
| SecurityTrails.Domain.createdDate | date | Created date |
| SecurityTrails.Domain.registrarName | string | Registrar name |
| SecurityTrails.Domain.contactEmail | string | Contact email |
| Domain.Admin.Country | string | Country |
| Domain.Admin.Email | string | Email |
| Domain.Admin.Name | string | Name |
| Domain.Admin.Phone | string | Phone |
| Domain.DomainStatus | string | Status |
| Domain.Name | string | Name |
| Domain.NameServers | string | Name server |
| Domain.UpdatedDate | date | Updated date |
| Domain.WHOIS.CreationDate | date | Creation date |
| Domain.WHOIS.DomainStatus | string | Status |
| Domain.WHOIS.ExpirationDate | date | Expiration date |
| Domain.WHOIS.NameServers | string | Name servers |
| Domain.WHOIS.Registrar.Name | string | Name |
| Domain.WHOIS.UpdatedDate | date | Updated date |
#### Command Example

Human Readable Output#

securitytrails-get-dns-history#


Lists out specific historical information about the given hostname parameter. In addition of fetching the historical data for a particular type, the count statistic is returned as well, which represents the number of that particular resource against current data.

Notice: Submitting indicators using this command might make the indicator data publicly available. See the vendor’s documentation for more details.

Base Command#

securitytrails-get-dns-history

Input#

Argument NameDescriptionRequired
hostnameHostname.Required
typeType. Possible values are: a, aaaa, mx, ns, soa, txt. Default is a.Required

Context Output#

PathTypeDescription
SecurityTrails.Domain.a_history_records.first_seenstringFirst seen
SecurityTrails.Domain.a_history_records.last_seenstringLast seen
SecurityTrails.Domain.a_history_records.organizationsunknownOrganizations
SecurityTrails.Domain.a_history_records.typestringType
SecurityTrails.Domain.a_history_records.values.ipstringIP
SecurityTrails.Domain.a_history_records.values.ipv6stringIPv6
SecurityTrails.Domain.mx_history_records.values.hoststringHost
SecurityTrails.Domain.mx_history_records.values.mx_countnumberMX count
SecurityTrails.Domain.mx_history_records.values.prioritynumberPriority
SecurityTrails.Domain.namestringName
SecurityTrails.Domain.ns_history_records.values.nameserverstringName server
SecurityTrails.Domain.ns_history_records.values.nameserver_countnumberName server count
SecurityTrails.Domain.soa_history_records.values.emailstringEmail
SecurityTrails.Domain.soa_history_records.values.email_countnumberEmail count
SecurityTrails.Domain.soa_history_records.values.ttlnumberTTL
SecurityTrails.Domain.txt_history_records.values.valuestringValue
SecurityTrails.Domain.a_history_record_pagesnumberA record pages count
SecurityTrails.Domain.aaaa_history_record_pagesnumberAAAA record pages count
SecurityTrails.Domain.mx_history_record_pagesnumberMX record pages count
SecurityTrails.Domain.ns_history_record_pagesnumberNS record pages count
SecurityTrails.Domain.soa_history_record_pagesnumberSOA record pages count
SecurityTrails.Domain.txt_history_record_pagesnumberTXT record pages count

Command Example#

#### Human Readable Output
### securitytrails-get-whois-history
***
Returns historical WHOIS information about the given domain.
Notice: Submitting indicators using this command might make the indicator data publicly available. See the vendor’s documentation for more details.
#### Base Command
`securitytrails-get-whois-history`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| hostname | Hostname. | Required |
| page | The page of the returned results, starting at 1. A page returns 100 results. | Optional |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| SecurityTrails.Domain.name | string | Name |
| SecurityTrails.Domain.whois_history.contact.telephone | string | Telephone |
| SecurityTrails.Domain.whois_history.contact.city | string | City |
| SecurityTrails.Domain.whois_history.contact.name | string | Name |
| SecurityTrails.Domain.whois_history.contact.street1 | string | Street 1 |
| SecurityTrails.Domain.whois_history.contact.state | string | State |
| SecurityTrails.Domain.whois_history.contact.organization | string | Organization |
| SecurityTrails.Domain.whois_history.contact.country | string | Country |
| SecurityTrails.Domain.whois_history.contact.postalCode | string | Postal code |
| SecurityTrails.Domain.whois_history.contact.type | string | Type |
| SecurityTrails.Domain.whois_history.contact.email | string | Email |
| SecurityTrails.Domain.whois_history.contact.fax | string | Fax |
| SecurityTrails.Domain.whois_history.started | number | Started |
| SecurityTrails.Domain.whois_history.expiresDate | number | Expires date |
| SecurityTrails.Domain.whois_history.domain | string | Domain |
| SecurityTrails.Domain.whois_history.nameServers | string | Name servers |
| SecurityTrails.Domain.whois_history.gtld | boolean | GTLD |
| SecurityTrails.Domain.whois_history.updatedDate | number | Updated date |
| SecurityTrails.Domain.whois_history.status | string | Status |
| SecurityTrails.Domain.whois_history.full_domain | string | Full domain |
| SecurityTrails.Domain.whois_history.createdDate | number | Created date |
| SecurityTrails.Domain.whois_history.registrarName | string | Registrar name |
| SecurityTrails.Domain.whois_history.ended | number | Ended date |
| SecurityTrails.Domain.whois_history_count | number | WHOIS history count |
| Domain.Name | string | Name |
| Domain.WHOIS/History.Admin.Email | string | Email |
| Domain.WHOIS/History.Admin.Name | string | Name |
| Domain.WHOIS/History.Admin.Phone | string | Phone |
| Domain.WHOIS/History.CreationDate | date | Creation date |
| Domain.WHOIS/History.DomainStatus | string | Status |
| Domain.WHOIS/History.ExpirationDate | date | Expiration date |
| Domain.WHOIS/History.NameServers | string | Name servers |
| Domain.WHOIS/History.Registrant.Email | string | Email |
| Domain.WHOIS/History.Registrant.Name | string | Name |
| Domain.WHOIS/History.Registrant.Phone | string | Phone |
| Domain.WHOIS/History.Registrar.Email | string | Email |
| Domain.WHOIS/History.Registrar.Name | string | Name |
| Domain.WHOIS/History.Registrar.Phone | string | Phone |
| Domain.WHOIS/History.UpdatedDate | date | Updated date |
#### Command Example

Human Readable Output#

securitytrails-get-ip-neighbors#


Returns the neighbors in any given IP level range and essentially allows you to explore closeby IP addresses. It will divide the range into 16 groups. Example: a /28 would be divided into 16 /32 blocks or a /24 would be divided into 16 /28 blocks

Base Command#

securitytrails-get-ip-neighbors

Input#

Argument NameDescriptionRequired
ipaddressStarting IP address (optionally with CIDR subnet mask).Required

Context Output#

PathTypeDescription
SecurityTrails.IP.ipstringIP address
SecurityTrails.IP.block.active_egressbooleanActive Egress
SecurityTrails.IP.block.hostnamesstringHostnames
SecurityTrails.IP.block.portsnumberPort
SecurityTrails.IP.block.sitesnumberSites
IP.AddressstringAddress

Command Example#

#### Human Readable Output
### securitytrails-search-domain
***
Filter and search specific records using DSL - a powerful SQL like query interface to the data via certain API end points.
#### Base Command
`securitytrails-search-domain`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| include_ips | Resolves any A records and additionally returns IP addresses. Possible values are: false, true. Default is false. | Optional |
| page | The page of the returned results, starting at 1. A page returns 100 results. | Optional |
| scroll | Request scrolling. Only supported when query is used and not filter. See the Scrolling API endpoint. Possible values are: false, true. Default is false. | Optional |
| query | The DSL query you want to run (https://docs.securitytrails.com/docs/how-to-use-the-dsl). | Optional |
| filter | JSON dicitonary of filter terms (https://docs.securitytrails.com/reference#domain-search). Can not be used together with query. | Optional |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| SecurityTrails.Domain.Search.alexa_rank | number | Alexa rank |
| SecurityTrails.Domain.Search.computed.company_name | string | Company name |
| SecurityTrails.Domain.Search.host_provider | string | Host provider |
| SecurityTrails.Domain.Search.hostname | string | Hostname |
| SecurityTrails.Domain.Search.mail_provider.[0] | string | Mail provider |
| SecurityTrails.Domain.Search.whois.createdDate | number | Created date |
| SecurityTrails.Domain.Search.whois.expiresDate | number | Expires date |
| SecurityTrails.Domain.Search.whois.registrar | string | Registrar |
#### Command Example

Human Readable Output#

securitytrails-statistics-domain#


Domain statistics

Base Command#

securitytrails-statistics-domain

Input#

Argument NameDescriptionRequired
queryThe DSL query you want to run (https://docs.securitytrails.com/docs/how-to-use-the-dsl).Optional
filterJSON dicitonary of filter terms (https://docs.securitytrails.com/reference#domain-search). Can not be used together with query.Optional

Context Output#

PathTypeDescription
SecurityTrails.Domain.Search.DomainStats.domain_countnumberDomain count
SecurityTrails.Domain.Search.DomainStats.hostname_count.relationstringRelation
SecurityTrails.Domain.Search.DomainStats.hostname_count.valuenumberValue
SecurityTrails.Domain.Search.DomainStats.tld_countnumberTLD count
SecurityTrails.Domain.Search.DomainStats.top_organizations.countnumberCount
SecurityTrails.Domain.Search.DomainStats.top_organizations.keystringKey
SecurityTrails.Domain.Search.DomainStats.whois_organization_countnumberWHOIS count

Command Example#

#### Human Readable Output
### securitytrails-get-associated-domains
***
Find all domains that are related to a hostname you input. Limited to 10000 results.
#### Base Command
`securitytrails-get-associated-domains`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| hostname | Hostname. | Required |
| page | The page of the returned results, starting at 1. A page returns 100 results. | Optional |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| SecurityTrails.Domain.associated_domains.alexa_rank | number | Alexa Rank |
| SecurityTrails.Domain.associated_domains.computed.company_name | string | Company Name |
| SecurityTrails.Domain.associated_domains.host_provider | string | Host Provider |
| SecurityTrails.Domain.associated_domains.hostname | string | Hostname |
| SecurityTrails.Domain.associated_domains.mail_provider | string | Mail Provider |
| SecurityTrails.Domain.associated_domains.whois.createdDate | number | Created Date |
| SecurityTrails.Domain.associated_domains.whois.expiresDate | number | Expires Date |
| SecurityTrails.Domain.associated_domains.whois.registrar | string | Registrar |
| SecurityTrails.Domain.associated_domain_count | number | Associated Domain Count |
#### Command Example

Human Readable Output#

securitytrails-search-ip#


Search for IP addresses. A maximum of 10000 results can be retrieved.

Base Command#

securitytrails-search-ip

Input#

Argument NameDescriptionRequired
pageThe page of the returned results, starting at 1. A page returns 100 results. Default is 1.Optional
queryThe DSL query you want to run (https://docs.securitytrails.com/docs/how-to-use-the-dsl).Required

Context Output#

PathTypeDescription
SecurityTrails.IP.Search.ipstringIP Address
SecurityTrails.IP.Search.ports.portnumberPort
SecurityTrails.IP.Search.ports.date_checkednumberDate checked
SecurityTrails.IP.Search.ptrstringPTR Record
IP.AddressstringAddress
IP.HostnamestringHostname
IP.PortsstringPorts

Command Example#

#### Human Readable Output
### securitytrails-statistics-ip
***
Statistics like Reverse DNS pattern identification (RDNS entries are grouped and displayed as x), ports (number of open ports found) or total results are returned
#### Base Command
`securitytrails-statistics-ip`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| query | The DSL query you want to run (https://docs.securitytrails.com/docs/how-to-use-the-dsl). | Required |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| SecurityTrails.IP.Search.IPStats.ports.count | number | Count |
| SecurityTrails.IP.Search.IPStats.ports.key | number | Key |
| SecurityTrails.IP.Search.IPStats.top_ptr_patterns.count | number | Count |
| SecurityTrails.IP.Search.IPStats.top_ptr_patterns.key | string | Key |
| SecurityTrails.IP.Search.IPStats.total.relation | string | Relation |
| SecurityTrails.IP.Search.IPStats.total.value | number | Value |
#### Command Example

Human Readable Output#

securitytrails-get-ip-whois#


Returns IPs information based on whois information.

Base Command#

securitytrails-get-ip-whois

Input#

Argument NameDescriptionRequired
ipaddressIP Address.Required

Context Output#

PathTypeDescription
SecurityTrails.IP.contact_emailstringEmail
SecurityTrails.IP.contacts.emailstringEmail
SecurityTrails.IP.contacts.organizationstringOrganization
SecurityTrails.IP.contacts.telephonestringTelephone
SecurityTrails.IP.contacts.typestringType
SecurityTrails.IP.ipstringIP
SecurityTrails.IP.sourcestringSource

Command Example#

#### Human Readable Output
### securitytrails-get-useragents
***
Fetch user agents seen during the last 30 days for a specific IPv4 address. It shows devices with egressing traffic based on large scale web server logs. The number of results is not limited.
#### Base Command
`securitytrails-get-useragents`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| ipaddress | IP Address. | Required |
| page | The page of the returned results, starting at 1. A page returns 100 results. Default is 1. | Optional |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| SecurityTrails.IP.ip | string | IP Address |
| SecurityTrails.IP.useragent_records_count | number | Count |
| SecurityTrails.IP.useragents.browser_family | string | Browser Family |
| SecurityTrails.IP.useragents.client.engine | string | Client Engine |
| SecurityTrails.IP.useragents.client.engine_version | string | Client Engine Version |
| SecurityTrails.IP.useragents.client.name | string | Client Engine Name |
| SecurityTrails.IP.useragents.client.type | string | Client Engine Type |
| SecurityTrails.IP.useragents.client.version | string | Client Version |
| SecurityTrails.IP.useragents.device.brand | string | Device Brand |
| SecurityTrails.IP.useragents.device.model | string | Device Model |
| SecurityTrails.IP.useragents.device.type | string | Device Type |
| SecurityTrails.IP.useragents.lastseen | string | Last Seen |
| SecurityTrails.IP.useragents.os.name | string | OS Name |
| SecurityTrails.IP.useragents.os.platform | string | OS Platform |
| SecurityTrails.IP.useragents.os.version | string | OS Version |
| SecurityTrails.IP.useragents.os_family | string | OS Family |
| SecurityTrails.IP.useragents.user_agent | string | User Agent |
#### Command Example

Human Readable Output#

domain#


Provides data enrichment for domains.

Notice: Submitting indicators using this command might make the indicator data publicly available. See the vendor’s documentation for more details.

Base Command#

domain

Input#

Argument NameDescriptionRequired
domainThe domain name to enrich.Required

Context Output#

PathTypeDescription
Domain.NameStringThe domain name, for example: "google.com".
Domain.DNSStringA list of IP objects resolved by DNS.
Domain.DomainStatusDatteThe status of the domain.
Domain.NameServersUnknown(List<String>) Name servers of the domain.
Domain.OrganizationStringThe organization of the domain.
Domain.SubdomainsUnknown(List<String>) Subdomains of the domain.
Domain.Admin.CountryStringThe country of the domain administrator.
Domain.Admin.EmailStringThe email address of the domain administrator.
Domain.Admin.NameStringThe name of the domain administrator.
Domain.Admin.PhoneStringThe phone number of the domain administrator.
Domain.Registrant.CountryStringThe country of the registrant.
Domain.Registrant.EmailStringThe email address of the registrant.
Domain.Registrant.NameStringThe name of the registrant.
Domain.Registrant.PhoneStringThe phone number for receiving abuse reports.
Domain.TagsUnknown(List) Tags of the domain.
Domain.WHOIS.DomainStatusStringThe status of the domain.
Domain.WHOIS.NameServersString(List<String>) Name servers of the domain.
Domain.WHOIS.CreationDateDateThe date that the domain was created.
Domain.WHOIS.UpdatedDateDateThe date that the domain was last updated.
Domain.WHOIS.ExpirationDateDateThe expiration date of the domain.
Domain.WHOIS.Registrant.NameStringThe name of the registrant.
Domain.WHOIS.Registrant.EmailStringThe email address of the registrant.
Domain.WHOIS.Registrant.PhoneStringThe phone number of the registrant.
Domain.WHOIS.Registrar.NameStringThe name of the registrar, for example: `GoDaddy`
Domain.WHOIS.Registrar.EmailStringThe email address of the contact.
Domain.WHOIS.Registrar.PhoneStringThe phone number of contact.
Domain.WHOIS.Admin.NameStringThe name of the domain administrator.
Domain.WHOIS.Admin.EmailStringThe email address of the domain administrator.
Domain.WHOIS.Admin.PhoneStringThe phone number of the domain administrator.
DBotScore.IndicatorStringThe indicator that was tested.
DBotScore.TypeStringThe indicator type.
DBotScore.VendorStringThe vendor used to calculate the score.
DBotScore.ScoreNumberThe actual score.

Command Example#

#### Human Readable Output
### securitytrails-sql-query
***
Queries the SecurityTrails SQL endpoint. The SecurityTrails SQL API provides a powerful SQL-like query interface to data via certain API endpoints. For a full reference of properties and operators please check the following link: https://securitytrails.com/reference/sql
#### Base Command
`securitytrails-sql-query`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| sql | The SQL query to execute (example: SELECT attribute FROM table WHERE condition = "value"). Possible values are: . | Required |
| timeout | Read timeout for calls (default is 20 seconds). Possible values are: . Default is 20. | Optional |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| Securitytrails.SQL.total | Number | The total number of hits discovered |
| Securitytrails.SQL.records | Unknown | The records returned |
| Securitytrails.SQL.id | String | The ID to use for further GET calls to retrieve more results |
| Securitytrails.SQL.query | String | The original query used |
| Securitytrails.SQL.pages | Number | The total number of pages that would need to be called to retrieve the rest of the results |
#### Command Example

Human Readable Output#

securitytrails-sql-get-next#


Retrieves the next page of results returned from a SQL query where the results exceeded the last page.

Base Command#

securitytrails-sql-get-next

Input#

Argument NameDescriptionRequired
idThe ID to use to retrieve the next page of results. Possible values are: .Required
timeoutRead timeout for calls (default is 20 seconds). Possible values are: . Default is 20.Optional

Context Output#

PathTypeDescription
Securitytrails.SQL.totalnumberThe total number of hits discovered
Securitytrails.SQL.recordsunknownThe records returned
Securitytrails.SQL.idstringThe ID to use for further GET calls to retrieve more results
Securitytrails.SQL.querystringThe original query used

Command Example#

#### Human Readable Output