Creating workflows for Censys assets

Let Oomnitza be your single source of truth!

You'll get complete visibility of your hosts as data from Censys is automatically transformed into consumable information and actionable insights.

Connect Oomnitza and Censys in minutes

Get the information and insights that you need by creating a configurable workflow that fetches the entire host entity by IP address and returns the most recent Censys view of the host and its services.

Before you start

Best practice
For the integration with Oomnitza, create a dedicated user account.

Censys uses basic authentication and requires your username and password to be added to Oomnitza.

Did you know?
You can sign-up for a free Censys account here, and add your username and password directly to Oomnitza by following the steps below.

Adding the credentials

To stream Censys user data into Oomnitza, complete the following steps

1. In Oomnitza, go to Configuration>Security>Credentials.
2. Click Add new credential (+).
3. Search for the integration, and then click the forward button > to select the integration.
4. Enter the user name and password of your account
5. Click Create.

Integration not in the list? Click Advanced Mode and complete these steps:

1. Add the information details.
2. Click the AUTHORIZATION tab.
3. Ensure that Basic Auth is selected as the authorization type.
4. Enter the user name and password of your account.
5. Click Create. 

Creating workflows

Create asset workflows

To create an asset workflow, you must complete these steps:  

1. Click Configuration > Workflows 
2. Click Add (+) and select Assets from the list.
3. Edit the Begin Block and add rules to trigger the workflow. 
   1. If you set the  Actions to New, the workflow will run for every new asset record added to Oomnitza. Alternatively, set the Actions to Schedule so that it only runs at a specific time or when manually triggered.
   2. Add Rule criteria. For example, you can add a rule so that the workflow only runs if a field has been updated or is empty.
4. Drag and drop the API block onto the Sandbox.
5. Click Edit on the API block and enter Censys in the search field. 
6. Select the Censys Get Host Details with IPV4 Address preset. To choose a preset, click the forward arrow (>).
7. Select the credentials that you created in the previous step.
8. Click Advanced Mode.
9. The IP address is required to fetch the host details and is referenced in the Information tab in the property{{ip_address}}.
10. Select the Response tab. You can map the entire response by placing {{response}} in the Response field and mapping it to a custom long text Oomnitza field, such as API Response. However, since the response can be over 1,000 characters, it may not be possible to map it to a single field. Instead, you can parse the JSON response values to custom Oomnitza fields, as per the image below.
11. Connect the Blocks. 
12. Validate, activate, and save your workflow.

Did you know?
If you don't know your IP address, you can modify the API call in the Advanced Mode > Information tab to first search for hosts using the Censys API Documentation: GET /v2/hosts/search.

You can find out more about what is returned in the Censys Get Host Details with IPV4 Address response by consulting the Censys  API Documentation GET /v2/hosts/{ip}.

Reference articles for workflows

• Mapping positive and negative responses
• Troubleshooting workflows 
• Using the API block