GCP - Enrichment
GCP Enrichment and Remediation Pack.#
This Playbook is part of theSupported versions
Supported Cortex XSOAR versions: 6.8.0 and later.
Given the IP address this playbook enriches GCP and Firewall information.
#
DependenciesThis playbook uses the following sub-playbooks, integrations, and scripts.
#
Sub-playbooksThis playbook does not use any sub-playbooks.
#
Integrations- Google Cloud Compute
- GCP-IAM
#
ScriptsGCPProjectHierarchy
#
Commands- gcp-compute-aggregated-list-instances-by-ip
- gcp-compute-list-firewall
- gcp-iam-project-iam-policy-get
- gcp-iam-tagbindings-list
#
Playbook InputsName | Description | Default Value | Required |
---|---|---|---|
GcpIP | GCP IP in alert | alert.remoteip | Required |
#
Playbook OutputsPath | Description | Type |
---|---|---|
GoogleCloudCompute.Instances | GCP VM Instances information. | unknown |
GoogleCloudCompute.Firewalls | GCP Firewall information | unknown |
GCPIAM.Policy | GCP IAM information | unknown |
GCPIAM.TagBindings | Project/Folder/Organization level tags. | unknown |
GCPHierarchy | GCP project hierarchy information. | unknown |