Whisper Security - Get WHOIS History
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Content Index
Microsoft Sentinel incident trigger playbook that extracts DNS entities from an incident, calls the Whisper Security whisper.history(domain) API for WHOIS snapshots, and adds the results as an incident comment with registrar, registrant, and date information.
Logic App Connectors
This playbook uses 3 Logic App connectors / built-in actions:
Action parameters (URLs, paths, function IDs)
| Action |
Method |
Endpoint |
Other |
| Entities_-_Get_DNS |
post |
/entities/dnsresolution |
— |
| Add_Incident_Comment_Success |
post |
/Incidents/Comment |
— |
| Add_Incident_Comment_Error |
post |
/Incidents/Comment |
— |
| Action |
Method |
Endpoint |
Other |
| Get_API_Key |
get |
/secrets/@{encodeURIComponent(last(split(parameters('keyVaultSecretUri'), '/')))}/value |
— |
http (Built-in)
| Action |
Method |
Endpoint |
Other |
| Call_Whisper_History_Domain |
POST |
https://graph.whisper.security/api/query |
— |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Playbooks · Back to Whisper