https://github.com/elceef/splunk-dnstwist-cmd
Splunk add-on providing a custom command to generate lookalike domain permutations
https://github.com/elceef/splunk-dnstwist-cmd
Last synced: about 1 month ago
JSON representation
Splunk add-on providing a custom command to generate lookalike domain permutations
- Host: GitHub
- URL: https://github.com/elceef/splunk-dnstwist-cmd
- Owner: elceef
- Created: 2023-10-28T18:15:42.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-10-06T14:15:38.000Z (over 1 year ago)
- Last Synced: 2025-01-12T14:47:55.074Z (over 1 year ago)
- Language: Python
- Size: 20.5 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
dnstwist add-on (command)
=========================
This Splunk add-on enhances functionality with a custom `| dnstwist` command,
enabling the generation of an extensive set of lookalike and potentially
malicious domain permutations.
Installation
------------
Execute build script which will download required libraries, and then produce
a complete and ready to install add-on package:
```
$ sh ./package.sh
```
When the package file is ready, either unpack it to `$SPLUNK_HOME/etc/apps` on
Splunk search head or use the CLI to install it.
Compatibility
-------------
Splunk Enterprise 8.x or newer is required.