PaloAltoNetworks / PaloAltoNetworks/pan.dev
Issue/Help with "Request Domain Information."
Nobody has claimed this yet.
- Dominant language
- MDX
- Stars
- 78
- Forks
- 88
- Avg merge
- 5d 17h
- Merged PRs (30d)
- 18
Description
Documentation link
https://pan.dev/dns-security/api/public-api-v-1-domain-info/
Describe the problem
missing new element to response for tunnelingTools in the API response
domain: pacn.top
category: tunneling
dgaScore: 0
whoisRecords: {'domainName': 'pacn.top', 'registrarName': 'Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)', 'contactEmail': 'DomainAbuse@service.aliyun.com', 'whoisServer': 'whois.aliyun.com/', 'nameServers': 'expirens3.hichina.com|expirens4.hichina.com|', 'createdDate': '2020-05-10T13:43:36Z', 'updatedDate': '2023-06-17T14:30:27Z', 'expiresDate': '2023-05-10T13:43:36Z', 'standardRegCreatedDate': '2020-05-10 13:43:36 UTC', 'standardRegUpdatedDate': '2023-06-17 14:30:27 UTC', 'standardRegExpiresDate': '2023-05-10 13:43:36 UTC', 'status': 'pendingDelete redemptionPeriod', 'Audit_auditUpdatedDate': '2023-06-19 01:15:03 UTC', 'registrant_email': '', 'registrant_name': 'REDACTED FOR PRIVACY', 'registrant_organization': 'kim', 'registrant_street1': 'REDACTED FOR PRIVACY', 'registrant_city': 'REDACTED FOR PRIVACY', 'registrant_state': 'shang hai', 'registrant_postalCode': 'REDACTED FOR PRIVACY', 'registrant_country': 'CHINA', 'registrant_fax': '', 'registrant_telephone': '', 'administrativeContact_email': '', 'administrativeContact_name': 'REDACTED FOR PRIVACY', 'administrativeContact_organization': 'REDACTED FOR PRIVACY', 'administrativeContact_city': 'REDACTED FOR PRIVACY', 'administrativeContact_state': 'REDACTED FOR PRIVACY', 'administrativeContact_postalCode': 'REDACTED FOR PRIVACY', 'administrativeContact_country': 'REDACTED FOR PRIVACY', 'administrativeContact_fax': '', 'administrativeContact_telephone': '', 'technicalContact_email': '', 'technicalContact_name': 'REDACTED FOR PRIVACY', 'technicalContact_organization': 'REDACTED FOR PRIVACY', 'technicalContact_city': 'REDACTED FOR PRIVACY', 'technicalContact_state': 'REDACTED FOR PRIVACY', 'technicalContact_postalCode': 'REDACTED FOR PRIVACY', 'technicalContact_country': 'REDACTED FOR PRIVACY', 'technicalContact_fax': '', 'technicalContact_telephone': '', 'registrarIANAID': '1599'}
categoryHistories: {'category': 'command-and-control', 'time': '2023-05-03T05:31:07Z', 'evidences': ['Associated with malicious traffic or strong similarity with known command-and-control URLs']},
{'category': 'malware', 'time': '2023-05-03T05:31:07Z', 'evidences': ['Associated with malicious traffic or strong similarity with known command-and-control URLs']}
ipHistories:
tunnelingTools: cobaltstrike
Suggested fix
update API reference to cover the new API response element for a DNS query
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the linked Domain Information API reference and inspect how the DNS query response is documented. Add the missing tunnelingTools element, using the reported response as the reference, and verify that the example or response schema clearly includes it.
Written by the indexing model from the issue text.
Assessment
- Domain
- api, documentation
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100