Overview
Enriches domains, hostnames, and IP addresses with passive DNS, live DNS, ASN, subdomain, and registration context from the Zetalytics ZoneCruncher API.
The Zetalytics DNS connector enriches Domain-Name, Hostname, IPv4-Addr, and IPv6-Addr observables using the Zetalytics ZoneCruncher API. It retrieves passive DNS, live DNS, ASN/ownership context, subdomains, registration (D8S), and nameserver glue records, and converts them into STIX 2.1 objects. The connector is designed to be deployed multiple times from the same image with different configuration profiles (manual, playbook, light/auto, deep) to support different enrichment workflows without duplicating code.