Skip to main content

Recorded Future Domain Reputation

This Playbook is part of the Recorded Future Intelligence Pack.#

Domain reputation using Recorded Future SOAR Enrichment


This playbook uses the following sub-playbooks, integrations, and scripts. Depends on the recorded futures indicator field; risk rules.


This playbook does not use any sub-playbooks.


  • Recorded Future v2


This playbook does not use any scripts.


  • domain

Playbook Inputs#

NameDescriptionDefault ValueRequired
DomainThe domain name to get reputation of.Domain.NameOptional

Playbook Outputs#

DBotScore.IndicatorThe indicator that was testedstring
DBotScore.TypeIndicator typestring
DBotScore.VendorVendor used to calculate the scorestring
DBotScore.ScoreThe actual scorenumber
Domain.Malicious.VendorFor malicious Domains, the vendor that made the decisionstring
Domain.Malicious.DescriptionFor malicious Domains, the reason that the vendor made the decisionstring
Domain.NameDomain namestring
RecordedFuture.Domain.riskScoreRecorded Future Domain Risk Scorenumber
RecordedFuture.Domain.riskLevelRecorded Future Domain Risk Levelstring
RecordedFuture.Domain.Evidence.ruleRecorded Risk Rule Namestring
RecordedFuture.Domain.Evidence.mitigationRecorded Risk Rule Mitigationstring
RecordedFuture.Domain.Evidence.descriptionRecorded Risk Rule descriptionstring
RecordedFuture.Domain.Evidence.timestampRecorded Risk Rule timestampdate
RecordedFuture.Domain.Evidence.levelRecorded Risk Rule Levelnumber
RecordedFuture.Domain.Evidence.ruleidRecorded Risk Rule IDstring
RecordedFuture.Domain.nameDomain namestring
RecordedFuture.Domain.maxRulesMaximum count of Recorded Future Domain Risk Rulesnumber
RecordedFuture.Domain.ruleCountNumber of triggered Recorded Future Domain Risk Rulesnumber

Playbook Image#

Recorded Future Domain Reputation