Domain malicious

Author: liorblob

Integrations/PhishLabsIOC/PhishLabsIOC.py

@@ -240,7 +240,7 @@ def create_domain_context(indicator: dict, classification: str) -> dict:
     if classification == 'Malicious':
         domain_object['Malicious'] = {
             'Vendor': 'PhishLabs',
-            'Description': 'Domain in PhishLabs global feed'
+            'Description': 'Domain in PhishLabs feed'
         }
 
     return domain_object
@@ -262,7 +262,7 @@ def create_url_context(indicator: dict, classification: str) -> dict:
     if classification == 'Malicious':
         url_object['Malicious'] = {
             'Vendor': 'PhishLabs',
-            'Description': 'URL in PhishLabs global feed'
+            'Description': 'URL in PhishLabs feed'
         }
 
     return url_object

Integrations/PhishLabsIOC/PhishLabsIOC.yml

@@ -145,6 +145,12 @@ script:
     - contextPath: Domain.Name
       description: Domain name
       type: String
+    - contextPath: Domain.Malicious.Vendor
+      description: Vendor reporting the malicious status
+      type: String
+    - contextPath: Domain.Malicious.Description
+      description: Description of the malicious domain
+      type: String
     - contextPath: PhishLabs.Domain.Name
       description: Domain name
       type: String
@@ -327,6 +333,12 @@ script:
     - contextPath: Domain.Name
       description: Domain name
       type: String
+    - contextPath: Domain.Malicious.Vendor
+      description: Vendor reporting the malicious status
+      type: String
+    - contextPath: Domain.Malicious.Description
+      description: Description of the malicious domain
+      type: String
     - contextPath: PhishLabs.Domain.Name
       description: Domain name
       type: String