Skip to main content

Block Domain - Proofpoint Threat Response

This Playbook is part of the Proofpoint Threat Response (Beta) Pack.#

Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

This playbook blocks domains using Proofpoint Threat Response. The playbook checks whether the Proofpoint Threat Response integration is enabled, whether the Domain input has been provided and if so, blocks the domain.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • ProofpointThreatResponse

Scripts#

This playbook does not use any scripts.

Commands#

  • proofpoint-tr-block-domain

Playbook Inputs#


NameDescriptionDefault ValueRequired
DomainThe Domain to block.Optional
DomainBlackListIDThe ID of the blacklist to block the domain in.Optional

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


Block Domain - Proofpoint Threat Response