Safe Browsing is a Google service that lets client applications check URLs against Google's constantly updated lists of unsafe web resources.
Connect Google Safebrowsing with Devo SOAR
Navigate to Automations > Integrations.
Search for Google Safebrowsing.
Click Details, then the + icon. Enter the required information in the following fields.
Label: Enter a connection name.
Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.
Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).
Remote Agent: Run this integration using the Devo SOAR Remote Agent.
API Key: The API key to connect to Google Safebrowsing.
After you've entered all the details, click Connect.
Actions for Google Safebrowsing
URL Scan
Submits a URL to Google Safebrowsing for lookup against their threat intelligence database. Based off of the results, automate how Incident Response is handled.
Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
Input Name | Description | Required |
|---|---|---|
Column Name | Select the column name from parent table to lookup value for. | Required |
Output
A JSON object containing multiple rows of result:
has_error: True/False
error: message/null
result: Success/Failure message
{json}{
"error": "Error in request to Google Safebrowsing: 400",
"has_error": true
}
Release Notes
v4.0.0- Updated architecture to support IO via filesystemv3.0.8- Added documentation link in the automation library.