OpenCTI-Platform / connectors

OpenCTI Connectors
https://www.opencti.io
Apache License 2.0
382 stars 415 forks source link

DNSTwist Connector #904

Open TechBurn0ut opened 2 years ago

TechBurn0ut commented 2 years ago

Use case

As a Cyber Threat Analyst, I would like an automation/connector that will take an identified Domain Name observable and pass it to DNSTwist to enumerate and find possible typo-squatting domains. As a part of this process, typo-squatting domain observables should be created with the appropriate Authored source, labels, and relevant whois information.

Current Workaround

Write an external process to do this.

Proposed Solution

As a Cyber Threat Analyst, I would like an automation/connector that will take an identified Domain Name observable and pass it to DNSTwist to enumerate and find possible typo-squatting domains. As a part of this process, typo-squatting domain observables should be created with the appropriate Authored source, labels, and relevant whois information.

If the feature request is approved, would you be willing to submit a PR?

Yes - if I can get cycles

sudesh0sudesh commented 9 months ago

Created DNS Twist Connector. New Pull request was made

https://github.com/OpenCTI-Platform/connectors/pull/1837