Supported Cortex XSOAR versions: 5.5.0 and later.
This playbook uses several sub playbooks to process and tag indicators based on the results of the Whois tool.
This playbook uses the following sub-playbooks, integrations, and scripts.
- TIM - Process Domain Age With Whois
- TIM - Process Domain Registrant With Whois
This playbook does not use any integrations.
This playbook does not use any scripts.
|Indicators matching the indicator query will be used as playbook input
|Setting this input as True will run the TIM - Process Domain registrant With Whois playbook.
|Setting this input as True will run the TIM - Process Domain Creation Age With Whois playbook.
|Domains for which the registrant isn't approved.
|Domains for which the registrant is approved.
|Domains Not Resolved By Whois.
|Domains whose create value is after the tested date.
|Domains whose create value is before the tested date.
|Domains that could not be processed for any reason are outputted to this context path.