Urlscan.io
urlscan.io is a Threat Intelligence (TI) integration. TI Data Source integrations are used during investigations to improve analysis and in interactive chat to help answer questions. They are optional, but enabling more tooling integrations enhances Dropzone analysis.
The Dropzone AI Platform integrates with urlscan.io, a URL scanning tool. urlscan browses URls like a regular user and records the activity that this page navigation creates such as domains and IPs contacted, resources (JavaScript, CSS, etc) requested from those domains, etc.
Create an API Key
urlscan.io requires an API key to enable.
To obtain an API Key, do the following:
Create an account at <urlscan.io>, if you do not have one already
In the banner on the left hand side of the urlscan.io homepage, navigate to Settings & API
Click "Create API Key"
Under Description, write (INSERT SHORT DESCRIPTION OF WHERE AND HOW API KEY WILL BE USED)
Click "Create API Key"
Copy API Key
Enable urlscan.io
To enable the Data Source integration, do the following:
Navigate to your Dropzone AI tenant home page e.g. https://mycompany.dropzone.ai
Click System > Integrations
Click "Data Sources" in the top left corner
In the THREAT INTEL section, find the urlscan.io tile
Input the API key
Under "Visibility", select "Unlisted" or "Private"
View urlscan's FAQ for more information about the options
Click "Test & Save"
If you have any errors engage your Dropzone AI support representative.
Last updated
