Extract Domains from Text‎

POST /Command/ExtractDomainFromContent

Extracts all domains from the input Text. This command may extract false positives. Use the Extensions parameter to filter out extensions that are false positives.

Request

Authentication: API keys or JSON web tokens (JWT)

Body Parameters

Parameter Name	Type	Required/Optional	Description
Username	`string`	Required	The username of your D3 SOAR account.
Site	`string`	Required	The D3 SOAR site to run the remote command.
Text Input	`string`	Required	The text to extract Domains from
Extensions	`array<string>`	Optional	List of extensions to exclude from the domain search. Extensions already included: .txt, .sql, .ps1, .pdf, .jpg, .png, .gif, .heif, .heic, .jpeg, .psd, .svg, .tif, .doc, .docx, .ppt, .pptx, .xls, .xlsx, .mp3, .wav, .mp4, .mov, .dll, .ini, .zip, .rar, .bat, .exe, .html, .css

Body Sample Data

application/json

{
  "Username": "Admin",
  "Site": "Security Operations",
  "CommandParams": {
    "Text Input": "MIME-Version: 1\r\nDate: Wed, 27 May 2020 21:45:53 -0700\r\nSubject: Welcome to use SOAR30\r\nFrom: J Zhan jzhan@d3security.com\r\nTo: J Zhan zhan@d3security.com\r\nHi All,\r\nWelcome to use D3 SOAR30.\r\nThank you.\r\nD3 Security\r\n",
    "Extensions": [
      ".js",
      ".py"
    ]
  }
}

Response

200 OK

application/json

Response Fields

Field Name	Type	Description
error	`string`	The error message if the API request has failed.
returnData	`JSON Object`	The return data from the API request.

Sample Data

{
    "error": "",
    "returnData": {
        "Status": "Successful",
        "Data": [
            "d3security.com"
        ]
    }
}

400 BadRequest

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

JSON

{"Error": "The body of the request must be a valid JSON object"}

401 Unauthorized

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

JSON

{"Error": "Invalid authentication key."}

429 TooManyRequests

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

JSON

{"Error": "The request exceeds rate limits or is otherwise blocked by rate limiting policies."}

500 InternalServerError

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

JSON

{"Error": "Unexpected Error."}