DNSTwist Connector

[TechBurn0ut]

Use case

As a Cyber Threat Analyst, I would like an automation/connector that will take an identified Domain Name observable and pass it to DNSTwist to enumerate and find possible typo-squatting domains. As a part of this process, typo-squatting domain observables should be created with the appropriate Authored source, labels, and relevant whois information.

Current Workaround

Write an external process to do this.

Proposed Solution

As a Cyber Threat Analyst, I would like an automation/connector that will take an identified Domain Name observable and pass it to DNSTwist to enumerate and find possible typo-squatting domains. As a part of this process, typo-squatting domain observables should be created with the appropriate Authored source, labels, and relevant whois information.

If the feature request is approved, would you be willing to submit a PR?

Yes - if I can get cycles

[sudesh0sudesh]

Created DNS Twist Connector. New Pull request was made

https://github.com/OpenCTI-Platform/connectors/pull/1837