Retrieve community pulse context for indicators from AlienVault OTX.
npx skills add https://github.com/Liberty91LTD/cti-skills --skill lookup-otx
Please help me install this Agent Skill. Skill: lookup-otx Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/lookup-otx Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill lookup-otx
This Skill retrieves community pulse context from AlienVault OTX for indicators (IP, domain, hash, URL), returning pulse counts, key pulses, tags, related indicators, and passive DNS. It provides retrieval-only context to support investigations.
Invoke the lookup by supplying an indicator type (ip, domain, hash, or url) and its value to fetch community pulse data from AlienVault OTX.
High-intent search queries and answers about installing and using this skill.
To retrieve threat intelligence pulses from AlienVault OTX, supply the indicator type and value to fetch associated community pulse data, tags, and related indicators for your IP address investigation.
Yes, you can enrich threat investigations with passive DNS data from AlienVault OTX by querying supported IP and domain indicators, returning available passive DNS records alongside pulse context.
During IOC enrichment, you can query AlienVault OTX pulse context for IP, domain, hash, and URL indicators to retrieve related community pulses and threat intelligence tags.
No, the OTX lookup satisfies a retrieval-only requirement by returning counts, pulses, tags, related indicators, and passive DNS without providing any threat intelligence interpretation or analysis.
The best way to get community pulse counts for a suspicious domain is to query AlienVault OTX, which returns key pulses, tags, related indicators, and passive DNS without interpretation.
An OTX threat intelligence lookup may return no pulses for a URL indicator if the community has not yet submitted any related context, as the retrieval strictly returns available data without interpretation.
Liberty91LTDQuery AlienVault OTX pulses and indicators for IPv4, domains, hashes, and URLs.
pauljbernardCoordinate cyber threat analysis, intelligence collection, and incident response.
jfrometaMap adversary techniques to MITRE ATT&CK phases for red-team simulations.
dandyeEnrich IOC indicators with GTI and Chronicle SIEM context to output threat findings and summaries.
