PaloAltoNetworks / pan.dev

Palo Alto Networks for Developers
https://pan.dev
MIT License
40 stars 55 forks source link

Issue/Help with "Request Domain Information." #426

Open epartington opened 1 year ago

epartington commented 1 year ago

Documentation link

https://pan.dev/dns-security/api/public-api-v-1-domain-info/

Describe the problem

missing new element to response for tunnelingTools in the API response

domain: pacn.top category: tunneling dgaScore: 0 whoisRecords: {'domainName': 'pacn.top', 'registrarName': 'Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)', 'contactEmail': 'DomainAbuse@service.aliyun.com', 'whoisServer': 'whois.aliyun.com/', 'nameServers': 'expirens3.hichina.com|expirens4.hichina.com|', 'createdDate': '2020-05-10T13:43:36Z', 'updatedDate': '2023-06-17T14:30:27Z', 'expiresDate': '2023-05-10T13:43:36Z', 'standardRegCreatedDate': '2020-05-10 13:43:36 UTC', 'standardRegUpdatedDate': '2023-06-17 14:30:27 UTC', 'standardRegExpiresDate': '2023-05-10 13:43:36 UTC', 'status': 'pendingDelete redemptionPeriod', 'Audit_auditUpdatedDate': '2023-06-19 01:15:03 UTC', 'registrant_email': '', 'registrant_name': 'REDACTED FOR PRIVACY', 'registrant_organization': 'kim', 'registrant_street1': 'REDACTED FOR PRIVACY', 'registrant_city': 'REDACTED FOR PRIVACY', 'registrant_state': 'shang hai', 'registrant_postalCode': 'REDACTED FOR PRIVACY', 'registrant_country': 'CHINA', 'registrant_fax': '', 'registrant_telephone': '', 'administrativeContact_email': '', 'administrativeContact_name': 'REDACTED FOR PRIVACY', 'administrativeContact_organization': 'REDACTED FOR PRIVACY', 'administrativeContact_city': 'REDACTED FOR PRIVACY', 'administrativeContact_state': 'REDACTED FOR PRIVACY', 'administrativeContact_postalCode': 'REDACTED FOR PRIVACY', 'administrativeContact_country': 'REDACTED FOR PRIVACY', 'administrativeContact_fax': '', 'administrativeContact_telephone': '', 'technicalContact_email': '', 'technicalContact_name': 'REDACTED FOR PRIVACY', 'technicalContact_organization': 'REDACTED FOR PRIVACY', 'technicalContact_city': 'REDACTED FOR PRIVACY', 'technicalContact_state': 'REDACTED FOR PRIVACY', 'technicalContact_postalCode': 'REDACTED FOR PRIVACY', 'technicalContact_country': 'REDACTED FOR PRIVACY', 'technicalContact_fax': '', 'technicalContact_telephone': '', 'registrarIANAID': '1599'} categoryHistories: {'category': 'command-and-control', 'time': '2023-05-03T05:31:07Z', 'evidences': ['Associated with malicious traffic or strong similarity with known command-and-control URLs']}, {'category': 'malware', 'time': '2023-05-03T05:31:07Z', 'evidences': ['Associated with malicious traffic or strong similarity with known command-and-control URLs']} ipHistories: tunnelingTools: cobaltstrike

Suggested fix

update API reference to cover the new API response element for a DNS query

welcome-to-palo-alto-networks[bot] commented 1 year ago

:tada: Thanks for opening your first issue here! Welcome to the community!