SecurityTrails is a data security company offering intel-reconnaissance and threat intelligence tools to cyber security teams. The SecurityTrails API makes it easy to enrich your dataset with any domain, DNS, and IP-related data. In this example, we are going to use the Details API to look up current data about hostnames, including statistics associated with a particular record such as the number of other hostnames that have the same IP.
Provider Website: https://securitytrails.com/
Provider Enrichment Docs: https://docs.securitytrails.com/reference/domain-details
Endpoint: https://api.securitytrails.com/v1/domain/oracle.com
Token / Registration Required: Yes
How To Enrich A Spreadsheet With SecurityTrails API:
For this example, my data is a simple list of 12 domains. Let’s use the SecurityTrails API to retrieve details about the Hostname.
Step 1. In Gigasheet, head to the Enrichments function and select Custom Enrichment. First we paste in the HTTP request for the Details API from the SecurityTrails API docs.
Step 2. On the next screen we’ll insert the column variable from our Gigasheet sheet for the prompt. In this case, we highlight the domain placeholder, “oracle.com”, in the input, and then select our Domain column and click +Insert Column Reference. We also need to highlight the “YOUR_KEY” and paste our real key from SecurityTrails. Then click Next.
Step 3. In this screen we see a preview of the results. Gigasheet makes requests for the first three rows and shows the SecurityTrails API response. At this point select the fields you want to be inserted into your sheet. We recommend hitting Select All since you can easily delete columns in Gigasheet.
Step 4. Finally, confirm the number of requests is to your liking, and when ready click Run to kickoff the custom enrichment process. It’s ok to leave or close the sheet; the custom enrichment will keep running and you’ll receive an email once the job has been completed. You can monitor the progress of your enrichment, or cancel the job at the top of the sheet.
Step 5. Once completed, Gigasheet will refresh the page and include data from the custom enrichment. The result will show generation of new columns based on the SecurityTrails Details API. SecurityTrails has added details about each hostname.