GNQL Investigate Top Result
A 2-step recipe with GreyNoise Intelligence. We can help you get access.
Recipe · 2 steps
GNQL Investigate Top Result
with GreyNoise Intelligence · Threat Detection & Response Management
GNQL search then deep-context the first matching IP.
- Execute the GNQL query against the GreyNoise dataset and return matching IP records along with request metadata.
- Retrieve the full IP context for the first IP returned by the GNQL query, including metadata, associated actor, activity tags, and raw scan data.
What you'll need to have ready
- apiKey: GreyNoise API key passed via the 'key' HTTP header.
- query: The GNQL query string (e.g. tags:Mirai classification:malicious).
- size: Number of results per page to return from the query.
For your developer
Arazzo workflow greynoise:gnql-investigate-top-result, 2 operations: gnqlV3Query → V3IP. Specs on APIs.io.