URL Enrichment - Generic v2

Enriches URLs using one or more integrations.

URL enrichment includes:

  • SSL verification for URLs
  • Threat information
  • Providing of URL screenshots

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • Rasterize

Scripts#

  • URLSSLVerification
  • Exists

Commands#

  • vt-private-get-url-report
  • rasterize

Playbook Inputs#


NameDescriptionDefault ValueSourceRequired
URLThe URLs to enrich.DataURLOptional
RasterizeWhether the system should take safe screenshots of input URLs.True-Optional
VerifyURLWhether the system should perform SSL certificate verification on the URLs.False-Optional

Playbook Outputs#


PathDescriptionType
URLThe URL object.uknown
URL.DataThe enriched URL.string
DBotScoreThe DBotScore object.unknown
URL.MaliciousWhether the detected URL was malicious.unknown
URL.VendorThe vendor that labeled the URL as malicious.string
URL.DescriptionThe additional information for the URL.string

Playbook Image#


URL_Enrichment_Generic_v2