Silent Push App for Splunk SOAR

This connector integrates with the Silent Push system to gain insights into domain/IP information, reputations, enrichment, and infratag related details. It also provides functionality to live-scan URLs and take screenshots of them. Additionally, it allows fetching future attack feeds from the Silent Push system

Supported Actions

• test connectivity: Initiate a connection to the Silent Push system to validate the asset configuration
• list domain information: Get domain information along with Silent Push risk score and live whois information for multiple domains
• get domain certificates: Get certificate data collected from domain scanning
• search domains: Search for domains with optional filters
• list domain infratags: Get infratags for multiple domains with optional clustering
• get enrichment data: Retrieve comprehensive enrichment information for a given resource (domain, IPv4, or IPv6)
• list ip information: Get IP information for multiple IPv4s and IPv6s
• get asn reputation: Retrieve the reputation information for an Autonomous System Number (ASN)
• get asn takedown reputation: Retrieve the takedown reputation information for an Autonomous System Number (ASN)
• get ipv4 reputation: Retrieve the reputation information for an IPv4
• get job status: Retrieve status of running job or results from completed job
• get nameserver reputation: Retrieve the reputation information for an nameserver
• get subnet reputation: Retrieve the reputation information for subnet
• get asns seen for domain: Retrieve the takedown reputation information for an Autonomous System Number (ASN)
• forward padns lookup: Forward PADNS lookup
• reverse padns lookup: Reverse PADNS lookup
• density lookup: Get information based on numerous granular DNS/IP parameters
• search scan data: Search the Silent Push scan data repositories
• live url scan: Scan a URL to get metadata on what it is hosted
• get indicators of future attack feed: Get indicators of future attack feed from the Silent Push platform
• live url screenshot: This action generate a screenshot for a URL and store it inside the vault
• get data export: Get data for Organisation feeds and download as csv file in vault