Skip to main content

Cortex ASM - Active Directory Enrichment

This Playbook is part of the Cortex Attack Surface Management Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.10.0 and later.

Playbook to enriches Service ownership info in Azure and On-Prem Active Directory.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • Microsoft Graph User
  • Active Directory Query v2


  • Set
  • GridFieldSetup


  • msgraph-user-get
  • ad-get-user

Playbook Inputs#

NameDescriptionDefault ValueRequired
serviceownerThe service owner to enrich in Azure directory.Optional

Playbook Outputs#

There are no outputs for this playbook.

Playbook Image#

Cortex ASM - Active Directory Enrichment