mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
divious1
26 lines
1.3 KiB
Plaintext
26 lines
1.3 KiB
Plaintext
[dnstwist-command]
|
|
syntax = dnstwist (<dnstwist-options>)*
|
|
shortdesc = Perform word permutations on a domain, or list of domains
|
|
description = Perform domain permutations on a domain, provided list of domains or domains part of Splunk_SA_CIM lookups
|
|
usage = public
|
|
maintainer = Splunk Security Research <research@splunk.com>
|
|
example1 = |dnstwist domainlist=domains.csv
|
|
comment1 = Performs word premutation on a list of domains provided under DA-ESS-ContentUpdate/lookup/domains.csv
|
|
example2 = |dnstwist domain=www.splunk.com
|
|
comment2 = Performs word premutation on a single domain
|
|
example3 = |dnstwist populate_from_cim=true
|
|
comment3 = Performs word premutation on cim_corporate_email_domains.csv and cim_corporate_web_domains.csv from Splunk_SA_CIM
|
|
|
|
[dnstwist-options]
|
|
syntax = domainlist=<string> | domain=<string> | populate_from_cim=<bool>
|
|
description = Prove the name of a lookup file with the list of domains, or individual domain you want to create permutations of.
|
|
|
|
[runstory-command]
|
|
syntax = runstory <analytic_story_name>
|
|
shortdesc = Run an analytic story
|
|
description = Run all the detection searches in an analytic story
|
|
maintainer = Splunk Security Research
|
|
example1 = | runstory "Malicious PowerShell"
|
|
example2 = | runstory "AWS Cryptomining"
|
|
usage = public
|