AlienVault 👽

👾 An async C# library for interacting with the AlienVault OTX DirectConnect APIs.

Usage

Provides an easy interface for interacting with all AlienVault OTX DirectConnect APIs.

To get started, add the library into your solution with either the NuGet Package Manager or the dotnet CLI.

dotnet add package AlienVault

For the primary classes to become available, import one or more of the used namespaces.

usingAlienVault;usingAlienVault.Entities;usingAlienVault.Modules;

An API key is required to interact with the API. Create your own key at: https://otx.alienvault.com/settings

Need more examples? Under the Example directory you can find a working demo project that implements this library.

Features

• Built for .NET 6 and .NET 7
• Fully async
• Deep coverage of the API
• Extensive XML documentation
• No external dependencies (uses integrated HTTP and JSON)
• Custom exceptions (AlienVaultException) for advanced catching
• Manage pulses, process events and submit your IOCs
• Automatic request retries
• Example project to demonstrate all capabilities of the library

Example

Under the Example directory you can find a working demo project that implements this library.

Code Samples

Initializing a new API client

AlienVaultClientclient=new(newAlienVaultClientConfig(){Key="cebf8dc104f90bf27153190a24e0fcc31945a5e6fcc1937c5f8640e0fcefc0ec",StrictLimit=false});

Creating a new pulse

Pulsepulse=awaitclient.Pulses.Create(new(){Name="Testing Pulse",Description="This pulse was created through the C# AlienVault library!",Public=true,Tags=newstring[]{"test","pulse"},TLP=TLP.White,Indicators=newIndicatorParameters[]{new(){Id=0,Type=IndicatorType.IPv4,Role=IndicatorRole.Unknown,Value="1.1.1.1",Title="A sample IP address",Expiration=DateTime.Now.AddYears(1)}}});

Adding IOCs to a pulse

intrevision=awaitclient.Pulses.AddIndicators("622b4458e11410ea56c68052",newIndicatorParameters[]{new(){Id=1,Type=IndicatorType.Domain,Role=IndicatorRole.Unknown,Value="alienvault.com",Title="A sample domain indicator",Expiration=DateTime.Now.AddMonths(1)}});

Submitting a file for analysis

FileSubmissionfileSubmission=awaitclient.Analysis.SubmitFile("C://sample.exe");

Submitting a URL for analysis

URLSubmissionurlSubmission=awaitclient.Analysis.SubmitURL("http://pzxdvpao.ml/");

Getting general IPv4 information

GeneralIPInfoipv4Info=awaitclient.Data.GetGeneralIPInfo("1.1.1.1");

Getting general domain information

GeneralDomainInfodomainInfo=awaitclient.Data.GetGeneralDomainInfo("example.com");

Getting a domain's WHOIS records

WhoisEntry[]whoisEntries=awaitclient.Data.GetWhois("t4ck0wsvvpbmktxzluyee11uce27kbct.nl");

Available Methods

You can find all available methods at DOCS.md.

Resources

• Website: https://otx.alienvault.com

This is a community-ran library. Not affiliated with AT&T Cybersecurity.