Skip to main content

URL Enrichment - Generic

This Playbook is part of the Deprecated Content (Deprecated) Pack.#

Deprecated

Use "URL Enrichment - Generic v2" playbook instead.

DEPRECATED. Use "URL Enrichment - Generic v2" playbook instead. Enriches a URL using one or more integrations.

URL enrichment includes:

  • Verify URL SSL
  • Threat information
  • URL reputaiton
  • Take URL screenshot

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • VirusTotal - Private API
  • Rasterize

Scripts#

  • URLSSLVerification
  • URLReputation
  • Exists

Commands#

  • vt-private-get-url-report
  • rasterize

Playbook Inputs#


NameDescriptionDefault ValueSourceRequired
urlThe URL to enrich.DataURLOptional
RasterizeWhether the system should take safe screenshots of input URLs.False-Optional
VerifyURLWhether the system should verify the input URLs.False-Optional
GetReputationWhether the playbook should get the reputation for the URL.True-Required

Playbook Outputs#


PathDescriptionType
URLThe URL's object.uknown
URL.DataThe enriched URL.string
DBotScoreThe DBotScore.unknown
URL.MaliciousWhether the URL was detected as malicious.unknown
URL.VendorThe name of vendor who labeled the URL as malicious.string
URL.DescriptionThe additional info on the URL.string

Playbook Image#


URL_Enrichment_Generic