Files
Anthropic-Cybersecurity-Skills/skills/performing-ioc-enrichment-automation/references/api-reference.md
T
mukul975 27c6414ca5 Add folder anatomy (scripts/agent.py + references/api-reference.md) for 648 cybersecurity skills
Complete skill folder anatomy across all cybersecurity skills:
- scripts/agent.py: 80-150 line Python agents using real libraries (impacket,
  boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.)
- references/api-reference.md: real API documentation with method signatures
- LICENSE: MIT license for all skill folders
2026-03-10 21:02:12 +01:00

1.7 KiB

API Reference: IOC Enrichment Automation

VirusTotal API v3

Endpoint Method Description
/api/v3/ip_addresses/{ip} GET IP address reputation and analysis stats
/api/v3/domains/{domain} GET Domain reputation, WHOIS, and DNS data
/api/v3/files/{hash} GET File hash analysis with 70+ AV engines
/api/v3/urls POST Submit URL for scanning

Header: x-apikey: <API_KEY> | Rate limit: 4 req/min (free), 500/min (premium)

AbuseIPDB API v2

Endpoint Method Description
/api/v2/check GET Check IP abuse confidence score
/api/v2/report POST Report an abusive IP address

Header: Key: <API_KEY> | Rate limit: 1000 req/day (free)

Shodan API

Endpoint Method Description
/shodan/host/{ip} GET Host info: ports, OS, vulns
/shodan/host/search GET Search Shodan by query

Param: key=<API_KEY> | Rate limit: 1 req/sec

GreyNoise Community API

Endpoint Method Description
/v3/community/{ip} GET IP classification (malicious/benign/unknown)

Header: key: <API_KEY>

Python Libraries

Library Version Purpose
requests >=2.28 HTTP client for all API calls
vt-py >=0.18 Official VirusTotal Python client
shodan >=1.28 Official Shodan Python client

References