Skip to main content

Recorded Future Entity Enrichment

This Playbook is part of the Recorded Future Intelligence Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.5.0 and later.

Template playbook to incorporate Recorded Future enrichment for IPs, Hashes, Domains, URLs into your current workflows. Playbook also shows how to look up available 'Links' data for IOCs.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • Recorded Future v2


This playbook does not use any scripts.


  • recordedfuture-intelligence
  • recordedfuture-links

Playbook Inputs#

NameDescriptionDefault ValueRequired
MD5File MD5 hash to enrich.File.MD5Optional
SHA256The file SHA256 hash to enrich.File.SHA256Optional
SHA1The file SHA1 hash to enrich.File.SHA1Optional
IPThe IP Address to enrich.IP.AddressOptional
DomainThe Domain name to enrich.Domain.NameOptional
URLThe URL to enrich.URL.DataOptional

Playbook Outputs#

DBotScore.IndicatorThe indicator that was tested.string
DBotScore.TypeThe indicator type.string
DBotScoreThe DBotScore object.unknown
DBotScore.VendorVendor used to calculate the score.string
DBotScore.ScoreThe actual score.number

Playbook Image#

Recorded Future Entity Enrichment