Tag Hunt To Context
A 3-step recipe with GreyNoise Intelligence. We can help you get access.
Recipe · 3 steps
Tag Hunt To Context
with GreyNoise Intelligence · Threat Detection & Response Management
Resolve a tag slug, GNQL-hunt it, then context the first matching IP.
- List tags filtered by name to resolve the canonical tag slug and metadata.
- Run a GNQL query for IP addresses carrying the resolved tag slug.
- Retrieve the full IP context for the first IP carrying the tag, including metadata, classification, associated actor, and raw scan data.
What you'll need to have ready
- apiKey: GreyNoise API key passed via the 'key' HTTP header.
- tagName: The tag name to resolve (partial match, e.g. Mirai).
- size: Number of results per page in the GNQL hunt step.
For your developer
Arazzo workflow greynoise:tag-hunt-to-context, 3 operations: listTags → gnqlV3Query → V3IP. Specs on APIs.io.