Skip to main content

Email Address Enrichment - Generic

This Playbook is part of the Deprecated Content (Deprecated) Pack.#


Use "Email Address Enrichment - Generic v2.1" playbook instead.

DEPRECATED. Use "Email Address Enrichment - Generic v2.1" playbook instead. Gets an email addresses's reputation using one or more integrations.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


This playbook does not use any integrations.


  • EmailDomainSquattingReputation
  • IsEmailAddressInternal
  • ADGetUser
  • Exists
  • EmailReputation


This playbook does not use any commands.

Playbook Inputs#

NameDescriptionDefault ValueSourceRequired
DomainThe list of internal domains.--Optional
EmailThe email addresses to enrich.Email.AddressAccountOptional
GetReputationWhether the playbook should get the reputation for the email address.True-Required

Playbook Outputs#

AccountThe account's object.unknown
Account.Email.AddressThe email account's full address.string
Account.GroupsThe groups the account is part of.string
Account.Email.DomainThe email's account domain.string
Account.Email.NetworkTypeThe email account's networktype. Can be, "Internal" or "External".string
Account.TypeThe type of the account entity.string
Account.Email.UsernameThe email account username.string
Account.IDThe unique Account DN (Distinguished Name).string
Account.DisplayNameThe account display name.string
Account.ManagerThe account's manager.string
Account.Email.Distance.DomainThe compared domain.string
Account.Email.Distance.ValueThe distance between the email domain and the compared domain.number
DBotScore.IndicatorThe indicator.string
DBotScoreThe DBotScore's object.unknown
DBotScore.TypeThe indicator type.string
DBotScore.VendorThe DBot score vendor.string
DBotScore.ScoreThe DBot score.number

Playbook Image#