https://github.com/polarityio/dig

Network admin tool for querying DNS servers
https://github.com/polarityio/dig

polarity-integration

Last synced: 14 days ago
JSON representation

Network admin tool for querying DNS servers

• Host: GitHub
• URL: https://github.com/polarityio/dig
• Owner: polarityio
• License: mit
• Created: 2020-02-16T03:47:57.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2023-11-25T14:58:02.000Z (12 months ago)
• Last Synced: 2024-08-01T19:45:37.303Z (3 months ago)
• Topics: polarity-integration
• Language: JavaScript
• Homepage:
• Size: 3.23 MB
• Stars: 18
• Watchers: 4
• Forks: 3
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Polarity Dig Integration

![mode:on demand only](https://img.shields.io/badge/mode-on%20demand%20only-blue.svg)

> This integration runs in `On Demand Only` mode

| ![overlay results with a domain](assets/overlay_domain.png) |![overlay results with an ip PTR](assets/overlay_ip_ptr.png)|![overlay results with an IP authority](assets/overlay_ip_authority.png)

|:---:|:---:|:---:|

|*Domain Query with Answers* |*IP Query with PTR Answer*| *IP Query with Authority section*|

The Polarity dig integration leverages the "node-dig-dns" library which provides a simple node wrapper for the unix/linux/macos dig command (domain information grope).  The integration allows you to specify what type of query is run.  By default, the integration runs an A record query for domains and a PTR (reverse DNS) query for IP addresses.  

By default, for domains, this integration runs the dig command:

```

dig A  @dns-server

```

For IP Addresses this integration does a reverse lookup:

```

dig -x  @dns-server

```

## Installing Dig

For this integration to work you must have the `dig` command line tool installed on your Polarity Server.  To install `dig` you can install the `bind-utils` package via `yum`:

```

sudo yum install bind-utils -y

```

## Dig Integration Options

### DNS Server

The DNS Server (host or IP) to perform lookups against. If left blank, the Polarity Server's default DNS server will be used. If an invalid or unreachable DNS Server is provided your `dig` requests will eventually time out. Defaults to `8.8.8.8`.

### Private IPs Only

If checked, the integration will only look up private (RFC-1918) IP addresses. Domains will still be looked up unless you turn domains off via the "Manage Integration Data" option.

### DNS Query Types for Domains

One or more query types to run via dig.  Each selected type requires a separate query to your DNS server.  If no types are selected an A Record query will be issued.  Query types only apply to domains as IPs will always be a PTR query.

### Results Filter

Choose which results are displayed. Defaults to always showing a result. Can also be set to only show results with an Answer section, or to only show results with an Answer or Authority section.

## About Polarity

Polarity is a memory-augmentation platform that improves and accelerates analyst decision making.  For more information about the Polarity platform please see:

https://polarity.io/