Required scopes: enrich/observables/deliberate:read

To learn more, visit the Cisco Talos documentation.

Parameters

ParameterDescription
Object TypeThe type of the observable to get details of. Can be retrieved from the ‘Get Observable Type’.
Object ValueThe value of the observable to get details of. (Could be an IP, domain, email, hash, etc..)

Example Output

{    "data": [        {            "module": "Sample Module",            "module_instance_id": "da033b3c-81da-4118-b73a-f03feb3adecf",            "module_type_id": "c84f54db-c187-4cab-8751-2b39b007ee55",            "data": {                "verdicts": {                    "count": 2,                    "docs": [                        {                            "type": "verdict",                            "disposition": 2,                            "observable": {                                "value": "https://ilo.brenz.pl/",                                "type": "url"                            },                            "disposition_name": "Malicious",                            "valid_time": {                                "start_time": "2023-02-09T13:36:23.410Z",                                "end_time": "2023-03-11T13:36:23.410Z"                            }                        },                        {                            "type": "verdict",                            "disposition": 2,                            "observable": {                                "value": "http://ilo.brenz.pl/favicon.ico/",                                "type": "url"                            },                            "disposition_name": "Malicious",                            "valid_time": {                                "start_time": "2023-02-09T13:36:23.420Z",                                "end_time": "2023-03-11T13:36:23.420Z"                            }                        }                    ]                }            }        }    ]}

Workflow Library Example

Get Observable Details with Cisco Talos and Send Results Via Email

Preview this Workflow on desktop