IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Auto Trigger WHOIS Lookup for DNS Name Artifacts

  • 1.  Auto Trigger WHOIS Lookup for DNS Name Artifacts

    IBM Champion
    Posted Mon May 02, 2022 06:07 PM
    Hello,

    I'm wondering if there's a way to automatically trigger the WHOIS lookup that's available within DNS Name artifacts?

    I'd like to have the report auto pulled so it doesn't require manual action.

    Here's a screenshot of the WHOIS section of a DNS Name artifact:


    Thanks!

    ------------------------------
    Liam Mahoney
    ------------------------------


  • 2.  RE: Auto Trigger WHOIS Lookup for DNS Name Artifacts

    Posted Tue May 03, 2022 04:29 AM
    At this moment, there is no built-in way to automatically pull the Whois report on SOAR standalone.

    ------------------------------
    Gilbert Liao
    ------------------------------