PaloAltoNetworks / PaloAltoNetworks/pan.dev

Issue/Help with "Request Domain Information."

Open
#426 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

documentation
Dominant language
MDX
Stars
78
Forks
88
Avg merge
5d 17h
Merged PRs (30d)
18

Description

Documentation link

https://pan.dev/dns-security/api/public-api-v-1-domain-info/

Describe the problem

missing new element to response for tunnelingTools in the API response

domain: pacn.top category: tunneling dgaScore: 0 whoisRecords: {'domainName': 'pacn.top', 'registrarName': 'Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)', 'contactEmail': 'DomainAbuse@service.aliyun.com', 'whoisServer': 'whois.aliyun.com/', 'nameServers': 'expirens3.hichina.com|expirens4.hichina.com|', 'createdDate': '2020-05-10T13:43:36Z', 'updatedDate': '2023-06-17T14:30:27Z', 'expiresDate': '2023-05-10T13:43:36Z', 'standardRegCreatedDate': '2020-05-10 13:43:36 UTC', 'standardRegUpdatedDate': '2023-06-17 14:30:27 UTC', 'standardRegExpiresDate': '2023-05-10 13:43:36 UTC', 'status': 'pendingDelete redemptionPeriod', 'Audit_auditUpdatedDate': '2023-06-19 01:15:03 UTC', 'registrant_email': '', 'registrant_name': 'REDACTED FOR PRIVACY', 'registrant_organization': 'kim', 'registrant_street1': 'REDACTED FOR PRIVACY', 'registrant_city': 'REDACTED FOR PRIVACY', 'registrant_state': 'shang hai', 'registrant_postalCode': 'REDACTED FOR PRIVACY', 'registrant_country': 'CHINA', 'registrant_fax': '', 'registrant_telephone': '', 'administrativeContact_email': '', 'administrativeContact_name': 'REDACTED FOR PRIVACY', 'administrativeContact_organization': 'REDACTED FOR PRIVACY', 'administrativeContact_city': 'REDACTED FOR PRIVACY', 'administrativeContact_state': 'REDACTED FOR PRIVACY', 'administrativeContact_postalCode': 'REDACTED FOR PRIVACY', 'administrativeContact_country': 'REDACTED FOR PRIVACY', 'administrativeContact_fax': '', 'administrativeContact_telephone': '', 'technicalContact_email': '', 'technicalContact_name': 'REDACTED FOR PRIVACY', 'technicalContact_organization': 'REDACTED FOR PRIVACY', 'technicalContact_city': 'REDACTED FOR PRIVACY', 'technicalContact_state': 'REDACTED FOR PRIVACY', 'technicalContact_postalCode': 'REDACTED FOR PRIVACY', 'technicalContact_country': 'REDACTED FOR PRIVACY', 'technicalContact_fax': '', 'technicalContact_telephone': '', 'registrarIANAID': '1599'} categoryHistories: {'category': 'command-and-control', 'time': '2023-05-03T05:31:07Z', 'evidences': ['Associated with malicious traffic or strong similarity with known command-and-control URLs']}, {'category': 'malware', 'time': '2023-05-03T05:31:07Z', 'evidences': ['Associated with malicious traffic or strong similarity with known command-and-control URLs']} ipHistories: tunnelingTools: cobaltstrike

Suggested fix

update API reference to cover the new API response element for a DNS query

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the linked Domain Information API reference and inspect how the DNS query response is documented. Add the missing tunnelingTools element, using the reported response as the reference, and verify that the example or response schema clearly includes it.

Written by the indexing model from the issue text.

Assessment

Domain
api, documentation
Issue type
Documentation
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.