Get Domains from URLs | docs.d3security

Last updated: Aug 07, 2024

This command takes a list of URLs and extracts the domain names from each URL. The extracted domain names are then returned in a new list, allowing for further processing, analysis, or reporting.

Implementation	System
Command Category	System Utility
Tags	artifact domain

Inputs

Parameter Name	Required/Optional	Description	Sample Data
URLs	Required	The list of URLs for extracting domains	JSON `[ "https://demo.d3securityonline.net/your-account", "https://www.testsite.com/user" ]`

Output

Key Fields

Important key and value pairs extracted from Raw Data.

Sample Data

JSON

{
    "Domains": [
        "demo.d3securityonline.net",
        "www.testsite.com"
    ]
}

Return Data

The returned result of this command. If some required parameters are not defined, this returned data could be empty. The returned result can be passed down directly to a subsequent command in playbooks.

Sample Data

JSON

Succeed

Context Data

The response data from the utility command.

Sample Data

JSON

{
    "domains": [
        "demo.d3securityonline.net",
        "www.testsite.com"
    ]
}

Remote Command API

The D3 command API allows you to send requests to D3 SOAR to execute this utility command via REST API.

Request

POST

https:/{base_url}/{api_namespace}/api/Command/ExtractDomainFromUrls

Headers

Please refer to the page Webhook Configuration Guide - Authentication Method: API Keys for more details.

Request Body

JSON

{
  "Username": "Admin",
  "Site": "Security Operations",
  "CommandParams": {
    "URLs": [
      "https://demo.d3securityonline.net/your-account",
      "https://www.testsite.com/user"
    ]
  }
}

Body Parameters

Parameter Name	Type	Required/Optional	Description
Username	`string`	Required	The username of your D3 SOAR account.
Site	`string`	Required	The D3 SOAR site to run the remote command.
URLs	`array<string>`	Required	The list of URLs for extracting domains

Sample Request

Sample Data

JSON

{
  "Username": "Admin",
  "Site": "Security Operations",
  "CommandParams": {
    "URLs": [
      "https://demo.d3securityonline.net/your-account",
      "https://www.testsite.com/user"
    ]
  }
}

Response

Response Fields

Field Name	Type	Description
error	`string`	The error message if the API request has failed.
keyFields	`JSON Object`	The key fields from the API request.
returnData	`string`	The return data from the API request.
contextData	`JSON Object`	The context data from the API request.

Sample Response

JSON

{
    "error": "",
    "keyFields": {
        "Domains": [
            "demo.d3securityonline.net",
            "www.testsite.com"
        ]
    },
    "returnData": "Succeed",
    "contextData": {
        "domains": [
            "demo.d3securityonline.net",
            "www.testsite.com"
        ]
    }
}