IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  What URLs uses the fn_whois integration app?

    Posted Thu December 05, 2019 06:50 AM
    Hi,

    We use proxy to access the internet for Resilient and Integration Server also so we need to know what URLs need the fn_whois integration app to reach for querying data?

    Thank you.

    Regards,
    Adam

    ------------------------------
    Adam Csurhes
    ------------------------------


  • 2.  RE: What URLs uses the fn_whois integration app?

    Posted Fri December 06, 2019 10:52 AM
    Edited by Richard Giesige Fri December 06, 2019 10:56 AM
    You probably already know this but I wanted to just say you can look at all the functions and plugins on their github site: fn_whois (https://github.com/ibmresilient/resilient-community-apps/tree/master/fn_whois

    Sorry had the wrong package from pypi: https://pypi.org/project/whois/

    Github page: https://github.com/DannyCork/python-whois/

    It looks like he just wraps the stadard linux command whois. (Comment in his code: Linux 'whois' command wrapper)
    ------------------------------
    Richard Giesige
    ------------------------------



  • 3.  RE: What URLs uses the fn_whois integration app?

    Posted Tue December 10, 2019 04:24 AM
    Thank you Richard.

    ------------------------------
    Adam Csurhes
    ------------------------------