Domain Detective

API Reference

Class

ThreatFeedAnalysis

Namespace DomainDetective
Assembly DomainDetective
Implements

Queries threat feed APIs for IP reputation data.

Inheritance

  • Object
  • ThreatFeedAnalysis

Usage

This type appears in these public API surfaces even when no hand-authored example is attached directly to the page.

Returned or exposed by

Accepted by parameters

Constructors

public ThreatFeedAnalysis(HttpClient client = null) #

Initializes a new instance of ThreatFeedAnalysis.

Parameters

client System.Net.Http.HttpClient = null optionalposition: 0
Optional HTTP client for requests.

Methods

public async Task Analyze(String ip, String virusTotalApiKey, String abuseIpDbApiKey, InternalLogger logger, CancellationToken ct = null) #
Returns: Task

Queries all enabled threat feeds.

Parameters

ip System.String requiredposition: 0
virusTotalApiKey System.String requiredposition: 1
abuseIpDbApiKey System.String requiredposition: 2
logger DomainDetective.InternalLogger requiredposition: 3
ct System.Threading.CancellationToken = null optionalposition: 4

Properties

public String Subject { get; set; } #

Gets or sets the subject value.

public Func<String, Task<String>> VirusTotalOverride { get; set; } #

Override VirusTotal query returning JSON.

public Func<String, Task<VirusTotalObject>> VirusTotalObjectOverride { get; set; } #

Override VirusTotal query returning a model.

public Func<String, Task<String>> AbuseIpDbOverride { get; set; } #

Override AbuseIPDB query.

public List<ThreatIntelFinding> Listings { get; } #

Results returned from the consulted sources.

public String FailureReason { get; set; } #

If feed queries fail, explains why.

public virtual List<Assessment> Assessments { get; } #

Gets the assessments value.

public IReadOnlyList<RecommendationAdvice> Recommendations { get; } #

Represents the recommendations value.

{{ include "footer" }}