Skip to main content

Criminal_IP_Micro_Asm

This Playbook is part of the CriminalIP Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.10.0 and later.

This playbook accepts a list of domains as input and sequentially executes the sub-playbook ‘Criminal_IP_Run_Micro_Asm’ for each domain in the list. After processing all domains, it aggregates the individual Micro ASM results and sends a summary to the user via email.

Accordingly, the user must configure the required parameters for the #4 send-mail command to enable email delivery.

Additionally, this playbook can be registered as a scheduled job to fully automate the process.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

  • Criminal_IP_Run_Micro_Asm

Integrations#

  • Criminal IP
  • mail-sender

Scripts#

  • set

Commands#

  • send-mail

Playbook Inputs#


NameDescriptionDefault ValueRequired
DomainsA list of domains that require Micro ASM analysis. This must be provided as a list-type input.

Example:#

[ "www.example.com ", "www.criminalip.io " ]

Playbook Image#


Criminal_IP_Micro_ASM