phantom-browserless

Splunk Phantom App for Browserless/chrome & Browserless.io

This will allow you to perform local screenshotting when using the docker or github app. Additionally you can use the broswerless.io service.

Features

• Get Screenshot - Provides the ability to take a screenshot of a URL using a headless chrome browser. Supports JPEG and PNG
• Get PDF - Provides the ability print a webpage as PDF (supports several Chrome PDF Print Settings)
• Get Content - Provides the ability to get the download of the HTML source of a URL provided

Installing browserless as docker

See more options on browserless.io's full documentation site.

If docker is already installed docker run -p 3000:3000 browserless/chrome

Install phbrowserless on phantom

1. Download and extract phbrowserless to you phantom server
2. cd to this new directory
3. phenv python2.7 /opt/phantom/bin/compile_app.pyc -i

   currently only Python2 is supported by Phantom UI - App already Python3 compliant phenv python3 /opt/phantom/bin/py3/compile_app.pyc -i

4. Procced to Phantom UI for configuration

Configure phbrowserless

1. Navigate to Apps in the Phantom UI
2. Select Unconfigured apps and look for "Browserless"
3. Click the "CONFIGURE NEW ASSET" button
4. Provide an asset name
5. Click asset settings
6. Provide the url for your docker host http://(hostname/ip):3000 if you are using browserless.io use http://chrome.browserless.io and don't forget to provide the Token.

   Token's can be used for self hosted instances as well, follow the instructions provided by browserless.io for how.

7. Click Save
8. Click Test Connectivity.