Cortex ASM - AWS Enrichment
#
This Playbook is part of the Cortex Attack Surface Management Pack.Supported versions
Supported Cortex XSOAR versions: 6.5.0 and later.
Given the IP address this playbook enriches AWS information relevant to ASM alerts.
#
DependenciesThis playbook uses the following sub-playbooks, integrations, and scripts.
#
Sub-playbooks- AWS - Enrichment
- AWS - Unclaimed S3 Bucket Validation
#
IntegrationsThis playbook does not use any integrations.
#
Scripts- GridFieldSetup
#
CommandsThis playbook does not use any commands.
#
Playbook InputsName | Description | Default Value | Required |
---|---|---|---|
RemoteIP | IP address of service | alert.remoteip | Optional |
ASMRuleID | Attack Surface Management Rule ID. | alert.asmattacksurfaceruleid | Required |
#
Playbook OutputsThere are no outputs for this playbook.