Skip to main content

Recorded Future Detailed Alert example

This Playbook is part of the Recorded Future Intelligence Pack.#

Detailed alert example for Recorded Future.

This playbook is intended as guidance for how the command recordedfuture-single-alert can be used in playbooks.

The single alert takes an alert id which can be retrieved from recordedfuture-alerts. If a specific alert rule is desired you can first fetch alert rules and input the alert rule id into reccordedfuture-alerts.


This playbook uses the following sub-playbooks, integrations, and scripts. Depends on the recorded futures indicator field; risk rules.


This playbook does not use any sub-playbooks.


  • Recorded Future v2


This playbook does not use any scripts.


  • recordedfuture-alerts
  • recordedfuture-single-alert

Playbook Inputs#

NameDescriptionDefault ValueRequired
freetextFreetext to search for specific alertDomain.Namerequired

Playbook Outputs#

There are no outputs for this playbook.#

DBotScore.IndicatorThe indicator that was testedstring
DBotScore.TypeIndicator typestring
DBotScore.VendorVendor used to calculate the scorestring
DBotScore.ScoreThe actual scorenumber

Playbook Image#

Recorded Future Domain Intelligence