Using The SIE Batch API to Find Matching Names in Newly Observed Domains (NOD)
ID: 59b49af8-1d9d-5bfb-940c-d000c202ce6c
STIX ID: report--59b49af8-1d9d-5bfb-940c-d000c202ce6c
Feed Name: DomainTools
This guide shows how to monitor Farsight’s Newly Observed Domains (Channel 212) using two short bash scripts that call sie_get_rb to fetch JSONL records, extract the RRname with jq, and filter matches via a user-maintained strings-to-match file and grep; it includes installation checks, sample runs, example output, and optional enhancements such as adjusting cadence, using fuzzy matchers, reporting additional fields, and converting NMSG-format channels to JSON Lines.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
