Censys for Splunk SOAR

This app implements investigative actions to get IP, domain and certificate data from the Censys Platform.

Supported Actions

• test connectivity: Validate the asset configuration for connectivity
• lookup host: Retrieve a host by IPv4 or IPv6 address
• lookup cert: Retrieve a certificate by SHA256 fingerprint
• lookup web property: Retrieve a web property by hostname and port
• get host event history: Retrieve event history for a host
• get host service history: Retrieve historical service observations for a host
• find related infrastructure: Create a CensEye job for a host, web property, or certificate target and return related infrastructure pivot results
• live rescan: Initiate a live rescan and wait for completion, then return a baseline-vs-post change log
• search: Search Censys assets using a CenQL query