Grey Noise Python Scripting with Brad Chiappetta

Summary: Brad Chiappetta of GreyNoise walks through Python scripting against the GreyNoise API, showing each call first with the Python requests library and then with the GreyNoise SDK, starting with the ping endpoint and moving through the Community API, the IP context endpoint, multi context, multi quick, and the RIOT endpoint. The multi context and multi quick endpoints accept up to 500 IP addresses per payload, and the Community API key is optional but carries different rate limits than the authenticated version.
Why it matters: The multi context and multi quick endpoints cap at 500 IP addresses per call, so any enrichment pipeline handling larger volumes has to segment its lookups and run them multiple times.

Read the original at GreyNoise Blog ↗