Domain Enrichment - Generic v2
Common Playbooks Pack.#
This Playbook is part of theEnrich domains using one or more integrations. Domain enrichment includes:
- Threat information
- Domain reputation using !domain command
#
DependenciesThis playbook uses the following sub-playbooks, integrations, and scripts.
#
Sub-playbooksThis playbook does not use any sub-playbooks.
#
IntegrationsThis playbook does not use any integrations.
#
ScriptsThis playbook does not use any scripts.
#
Commands- umbrella-domain-categorization
- domain
#
Playbook InputsName | Description | Default Value | Required |
---|---|---|---|
Domain | The domain name to enrich. | Domain.Name | Optional |
UseReputationCommand | Define if you would like to use the !url command. Note: This input should be used whenever there is no auto-extract enabled in the investigation flow. Possible values: True / False. | False | Required |
#
Playbook OutputsPath | Description | Type |
---|---|---|
Domain | The domain objects. | unknown |
DBotScore | Indicator, Score, Type, and Vendor. | unknown |
Domain.Name | Bad domain found. | unknown |
Domain.Malicious.Vendor | For malicious domains, the vendor that made the decision. | unknown |
DBotScore.Indicator | The indicator that was tested. | unknown |
DBotScore.Type | The indicator type. | unknown |
DBotScore.Score | The actual DBot score. | unknown |
DBotScore.Reliability | Reliability of the source providing the intelligence data. | unknown |