anthonygtellez

#!/bin/bash
# Put all the domain names in domains.txt, one per line
# then run in the terminal: bash domains.sh
# this will print each domain in the terminal as it looks it up
# The result csv will contains the domain, IP & Nameservers in each column

# Give each column the relevant header titles
echo "Domain Name,IP Address" > dig_cloud-bleed_domains.csv

while read domain

anthonygtellez

#!/bin/bash
# Put all the domain names in domains.txt, one per line
# then run in the terminal: bash domains.sh
# this will print each domain in the terminal as it looks it up
# The result csv will contains the domain, IP & Nameservers in each column

# Give each column the relevant header titles
echo "Domain Name,IP Address,Nameserver,Nameserver,Nameserver,Nameserver,Nameserver" > domains.csv

while read domain

anthonygtellez

anthonygtellez

Keybase proof

I hereby claim:

• I am anthonygtellez on github.
• I am anthonygtellez (https://keybase.io/anthonygtellez) on keybase.
• I have a public key ASCBPDuJGWCUjLpIFk2a5Rxi1_wJmTJrS3QYZMfnfmLaLQo

To claim this, I am signing this object:

anthonygtellez

anthonygtellez

Fix for Splunk TA Bro to index gzipped data and have the sourcetype match current log

• disable input once historical data onboarding is completed.
• required on UF, HF, IDX, SH

Inputs.conf

[monitor:///usr/local/bro/logs/*/*.log.gz]
sourcetype = brogz
index = bro