Skip to main content

Domain Enrichment - RST Threat Feed

This Playbook is part of the RST Threat Feed Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

Enrich domains using RST Threat Feed integration

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • RST Cloud - Threat Feed API

Scripts#

This playbook does not use any scripts.

Commands#

  • domain

Playbook Inputs#


NameDescriptionDefault ValueRequired
DomainThe domain name to enrich.Domain.NameRequired
thresholdDefines the minimum score to set indicators as maliciousinputs.thresholdOptional

Playbook Outputs#


PathDescriptionType
DomainThe domain objects.unknown
DBotScoreIndicator, Score, Type, and Vendor.unknown