Skip to main content

Cisco Umbrella Investigate

Download With Dependencies

Cisco Umbrella Investigate

Using Cisco Umbrella, you can secure your users and apps anywhere they are located. Cisco Umbrella enables you to obtain the information you need to improve and simplify your security management, and provides detection scoring and prediction of emerging threats.

What does this pack do?

  • Get the category, WHOIS data, or security data for a domain.
  • Get the DNS database for domains or IP addresses.
  • Get a list of malicious domains associated with an IP address.
  • Search for domains that match a regex.
  • Get the reputation of a domain.
  • Get domains associated with registrar email addresses or a nameserver
  • Get data for when a domain, IP address, or URL was attributed to a security organization or as a threat type.

This pack also supports execution metrics, as part of the new API Execution Metrics dashboard.

Using Cisco Umbrella, you can secure your users and apps anywhere they are located. Cisco Umbrella enables you to obtain the information you need to improve and simplify your security management, and provides detection scoring and prediction of emerging threats.

What does this pack do?

  • Get the category, WHOIS data, or security data for a domain.
  • Get the DNS database for domains or IP addresses.
  • Get a list of malicious domains associated with an IP address.
  • Search for domains that match a regex.
  • Get the reputation of a domain.
  • Get domains associated with registrar email addresses or a nameserver
  • Get data for when a domain, IP address, or URL was attributed to a security organization or as a threat type.

This pack also supports execution metrics, as part of the new API Execution Metrics dashboard.

PUBLISHER

Cortex

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByCortex
CreatedJuly 15, 2020
Last ReleaseAugust 21, 2023
WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.