Skip to main content

URL Enrichment - Generic v2

This Playbook is part of the Common Playbooks Pack.#

Enrich URLs using one or more integrations.

URL enrichment includes:

  • SSL verification for URLs.
  • Threat information.
  • Providing of URL screenshots.
  • URL Reputation using !url.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • Rasterize


  • Exists
  • URLSSLVerification


  • rasterize
  • url

Playbook Inputs#

NameDescriptionDefault ValueRequired
URLThe URLs to enrich.URL.DataOptional
RasterizeDefine if you would like the system take safe screenshots of input URLs.
Possible values: True / False.
The default value is true.
VerifyURLDefine if you would like the system perform SSL certificate verification on the URLs.
Possible values: True / False.
The default value is false.
UseReputationCommandDefine if you would like to use the !url command.
Note: This input should be used whenever there is no auto-extract enabled in the investigation flow.
Possible values: True / False.
The default value is false.

Playbook Outputs#

URLThe URL object.uknown
URL.DataThe enriched URL.string
DBotScoreThe DBotScore object.unknown
URL.MaliciousWhether the detected URL was malicious.unknown
URL.Malicious.VendorFor malicious URLs, the vendor that made the decision.unknown
URL.Malicious.DescriptionFor malicious URLs, the reason that the vendor made the decision.unknown
DBotScore.IndicatorThe indicatorstring
DBotScore.TypeThe indicator's typestring
DBotScore.VendorThe reputation vendorstring
DBotScore.ScoreThe reputation scorenumber
DBotScore.ReliabilityReliability of the source providing the intelligence data.unknown
URL.Relationships.EntityAThe source of the relationship.unknown
URL.Relationships.EntityBThe destination of the relationship.unknown
URL.Relationships.RelationshipThe name of the relationship.unknown
URL.Relationships.EntityATypeThe type of the source of the relationship.unknown
URL.Relationships.EntityBTypeThe type of the destination of the relationship.unknown
InfoFile.EntryIDThe EntryID of the image/pdf file.unknown
InfoFile.ExtensionThe extension of the image/pdf file.unknown
InfoFile.NameThe name of the image/pdf file.unknown
InfoFile.InfoThe info of the image/pdf file.unknown
InfoFile.SizeThe size of the image/pdf file.unknown
InfoFile.TypeThe type of the image/pdf file.unknown

Playbook Image#

URL Enrichment - Generic v2