İçeriğe geç
YENİPazar yeri ve trig8n Agent: geliştirdiğinizi satın; planlar ve değişiklikler siz görmeden önce test edilsin. Yeniliklere bak

Kütüphane / Güvenlik ve Uyumluluk

Güvenlik ve Uyumluluk

VirusTotal ve GreyNoise ile IP ve alan adlarını kontrol etme

Webhook veya başka bir iş akışı tarafından çağrıldığında DNS bilgisini sorgular, VirusTotal ve GreyNoise ile tarar ve sonuçları Slack ile Gmail'e gönderir.

Ne yapar

![VirusTotal]({{ $env.WEBHOOK_URL }} ## VirusTotal Integration - Purpose: - This workflow component is specifically crafted to harness the VirusTotal API's capabilities, allowing URLs to be submitted for thorough scanning. The goal is to seamlessly integrate the scanning process into the workflow, handling the asynchronous nature of VirusTotal scans by effectively managing state checks and result compilation. - Implement URL scanning by submitting requests to the VirusTotal API and accurately aggregating the scan results for analysis. ## Details and Best Practices For successful VirusTotal integration, it's crucial to submit URLs following standard web formats. The workflow is configured to expect correct URL inputs; deviations can disrupt the scanning process. Upon submission, if the VirusTotal scan results are pending or if errors are encountered, these can be tracked and examined under the 'Executions' tab. Develop a proactive strategy for handling such cases, including error logging, maximum retry limitations, or implementing a timeout mechanism. The configuration of the workflow takes into account the need to prevent rapid, repetitive status checks, which can strain the VirusTotal API. As a result, it employs a looping system for status re-evaluation, which should be managed with precision to avoid unnecessary delays or excessive polling. Note that this integration is tailored for workflows that involve the VirusTotal API. While it works with the free VirusTotal license, too many requests may cause errors due to rate limiting. The Public API is limited to 500 requests per day and a rate of 4 requests per minute. It requires valid credentials set up in the HTTP request nodes to authenticate API calls successfully. Users should configure their API keys for access, and handle any API error responses, like HTTP 4xx or 5xx codes, with a robust error-logging and retry mechanism to ensure reliability and effectiveness of the scan process.

Adımlar

  1. VirusTotal result
  2. DNS Lookup
  3. Set IP From Lookup
  4. Set IP
  5. Merge VirusTotal & Greynoise results
  6. Is IP?
  7. Start VirusTotal Scan
  8. VirusTotal Summary
  9. VirusTotal ready?
  10. Wait 5s
  11. Webhook
  12. Get List of URLs
  13. Set Email
  14. Merge Greynoise results

Toplam 79 adım.

Benzer otomasyonlar