Censys
With this Playbook App, you can retrieve multiple types of enrichment information for IOCs. Additionally, it allows you to craft custom Censys searches to retrieve result sets based on factors such as software versions being run, services running, open ports, and more. You can even use it to monitor your own potentially open and vulnerable infrastructure, among numerous other possible use cases. The following actions are available with this Playbook App:
- DNS Lookup
- Reverse DNS Lookup
- Search Censys
- Get Enrichment
- Parse Results
This app can be found in the ThreatConnect App Catalog under the name: Censys
