Skip to main content

Digital Shadows - IoC Assessment & Enrichment

This Playbook is part of the ReliaQuest GreyMatter DRP Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

Enrich indicators by providing intelligence and more associated indicators based on confirmed reporting in Digital Shadows SearchLight.


This playbook uses the following sub-playbooks, integrations, and scripts.


  • Digital Shadows - CVE_IoC Assessment & Enrichment
  • Digital Shadows - URL_IoC Assessment & Enrichment
  • Digital Shadows - SHA1_IoC Assessment & Enrichment
  • Digital Shadows - MD5_IoC Assessment & Enrichment
  • Digital Shadows - IP_IoC Assessment & Enrichment
  • Digital Shadows - SHA256_IoC Assessment & Enrichment
  • Digital Shadows - Domain_IoC Assessment & Enrichment


This playbook does not use any integrations.


This playbook does not use any scripts.


This playbook does not use any commands.

Playbook Inputs#

NameDescriptionDefault ValueRequired
IoC_IPAn IP address for assessment and enrichmentIP.AddressOptional
IoC_CVEA CVE for assessment and enrichmentCVE.IDOptional
IoC_DomainA domain for assessment and enrichmentDomain.NameOptional
IoC_URLA URL for assessment and enrichmentURL.DataOptional
IoC_MD5A MD5 hash for assessment and enrichmentFile.MD5Optional
IoC_SHA256A SHA256 hash for assessment and enrichmentFile.SHA256Optional
IoC_SHA1A SHA1 hash for assessment and enrichmentFile.SHA1Optional

Playbook Outputs#

DBotScore.IndicatorIndicator Valuestring
DBotScore.TypeIndicator Typestring