Skip to content

Commit

Permalink
Release notes for version 2.0.23
Browse files Browse the repository at this point in the history
  • Loading branch information
root committed Jan 7, 2022
1 parent e9eb21d commit a0c49eb
Show file tree
Hide file tree
Showing 4 changed files with 107 additions and 2 deletions.
96 changes: 96 additions & 0 deletions readme.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,15 @@
[comment]: # "Auto-generated SOAR connector documentation"
# DNS

Publisher: Splunk
Connector Version: 2\.0\.23
Product Vendor: Generic
Product Name: DNS
Product Version Supported (regex): "\.\*"
Minimum Product Version: 5\.0\.0

This app implements investigative actions that return DNS Records for the object queried

[comment]: # " File: readme.md"
[comment]: # " Copyright (c) 2016-2022 Splunk Inc."
[comment]: # ""
Expand All @@ -15,3 +27,87 @@
This simple DNS resolver app is designed to provide both forward and reverse lookup capabilities.
Users can specify a name and record type in a "lookup domain" action, or an IP address in a "lookup
ip" action. IPv4 and IPv6 addresses are both supported.


### Configuration Variables
The below configuration variables are required for this Connector to operate. These variables are specified when configuring a DNS asset in SOAR.

VARIABLE | REQUIRED | TYPE | DESCRIPTION
-------- | -------- | ---- | -----------
**dns\_server** | optional | string | IP of the DNS server for lookups
**host\_name** | optional | string | Hostname to be used in test connectivity

### Supported Actions
[test connectivity](#action-test-connectivity) - Validate the asset configuration for connectivity
[lookup domain](#action-lookup-domain) - Query DNS records for a Domain or Host Name
[lookup ip](#action-lookup-ip) - Query Reverse DNS records for an IP

## action: 'test connectivity'
Validate the asset configuration for connectivity

Type: **test**
Read only: **True**

#### Action Parameters
No parameters are required for this action

#### Action Output
No Output

## action: 'lookup domain'
Query DNS records for a Domain or Host Name

Type: **investigate**
Read only: **True**

A list of record <b>types</b> to be resolved is supplied, one of which the user may choose as the value for the <b>type</b> parameter, these are\:<br><ul><li>A</li><li>AAAA</li><li>CNAME</li><li>HINFO</li><li>ISDN</li><li>MX</li><li>NS</li><li>SOA</li><li>TXT</li></ul>When taking a lookup domain action from a Playbook, the author can look up arbitrary DNS record types by supplying the desired record type as a string for the <b>type</b> parameter\.

#### Action Parameters
PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS
--------- | -------- | ----------- | ---- | --------
**domain** | required | Record to resolve | string | `host name` `domain`
**type** | optional | DNS Record Type | string |

#### Action Output
DATA PATH | TYPE | CONTAINS
--------- | ---- | --------
action\_result\.status | string |
action\_result\.parameter\.domain | string | `host name` `domain`
action\_result\.parameter\.type | string |
action\_result\.data\.\*\.record\_info\_objects\.\*\.record\_info | string | `ip`
action\_result\.data\.\*\.record\_infos | string | `ip`
action\_result\.summary\.cannonical\_name | string |
action\_result\.summary\.canonical\_name | string |
action\_result\.summary\.hostname | string | `host name` `domain`
action\_result\.summary\.record\_info | string | `ip`
action\_result\.summary\.total\_record\_infos | numeric |
action\_result\.message | string |
summary\.total\_objects | numeric |
summary\.total\_objects\_successful | numeric |

## action: 'lookup ip'
Query Reverse DNS records for an IP

Type: **investigate**
Read only: **True**

The <b>lookup ip</b> action takes an IP address parameter\. The IP address \(IPv4 or IPv6\) will be looked up against the appropriate reverse lookup DNS records, and any associate hostname\(s\) will be returned\. Only <b>PTR</b> type lookups are returned\.

#### Action Parameters
PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS
--------- | -------- | ----------- | ---- | --------
**ip** | required | IP to resolve | string | `ip`

#### Action Output
DATA PATH | TYPE | CONTAINS
--------- | ---- | --------
action\_result\.status | string |
action\_result\.parameter\.ip | string | `ip`
action\_result\.data | string |
action\_result\.summary\.cannonical\_name | string |
action\_result\.summary\.canonical\_name | string |
action\_result\.summary\.hostname | string | `host name` `domain`
action\_result\.summary\.ip | string | `ip`
action\_result\.message | string |
summary\.total\_objects | numeric |
summary\.total\_objects\_successful | numeric |
6 changes: 6 additions & 0 deletions release_notes/2.0.23.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
**DNS Release Notes - Published by Splunk January 07, 2022**


**Version 2.0.23 - Released January 07, 2022**

* Marked the app as FIPS Compliant [PAPP-21502]
6 changes: 5 additions & 1 deletion release_notes/release_notes.html
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
<b>DNS Release Notes - Published by Splunk December 17, 2020</b>
<b>DNS Release Notes - Published by Splunk January 07, 2022</b>
<br><br>
<b>Version 2.0.23 - Released January 07, 2022</b>
<ul>
<li>Marked the app as FIPS Compliant [PAPP-21502]</li>
</ul>
<b>Version 2.0.22 - Released December 17, 2020</b>
<ul>
<li>Improved Python 3 compatibility release</li>
Expand Down
1 change: 0 additions & 1 deletion release_notes/unreleased.md
Original file line number Diff line number Diff line change
@@ -1,2 +1 @@
**Unreleased**
* Marked the app as FIPS Compliant [PAPP-21502]

0 comments on commit a0c49eb

Please sign in to comment.