Barracuda Reputation Block List (BRBL)

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

This integration enables reputation checks against IPs from Barracuda Reputation Block List (BRBL) This integration was integrated and tested with Barracuda Reputation Block List (BRBL)

Configure Barracuda Reputation Block List (BRBL) on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.
  2. Search for Barracuda Reputation Block List (BRBL).
  3. Click Add instance to create and configure a new integration instance.
  1. Click Test to validate the connection.

Commands#

You can execute these commands from the Demisto CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

ip#


Get IP Reputation

Base Command#

ip

Input#

Argument NameDescriptionRequired
ipIP to look upRequired

Context Output#

PathTypeDescription
ipStringGet IP details from Barracuda(BRBL) service
Barracuda.IPStringIP details
DBotScore.IndicatorStringThe indicator itself
DBotScore.ScoreNumberScore
DBotScore.TypeStringType of the indicator
DBotScore.VendorStringVendor information
IP.AddressStringIP address
IP.Malicious.VendorStringThe vendor reporting the IP address as malicious.
IP.Malicious.DescriptionStringA description explaining why the IP address was reported as malicious.

Command Example#

!ip ip=1.1.1.1

Context Example#

{
"Barracuda": {
"IP": {
"indicator": "1.1.1.1"
}
},
"DBotScore": {
"Indicator": "1.1.1.1",
"Score": 0,
"Type": "ip",
"Vendor": "Barracuda"
},
"IP": {
"Address": "1.1.1.1"
}
}

Human Readable Output#

Results#

indicator
1.1.1.1