DBot Indicator Enrichment - Generic

Gets indicator's internal Dbot score.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

  • GetIndicatorDBotScore

Commands

This playbook does not use any commands.

Playbook Inputs


NameDescriptionDefault ValueRequired
EmailThe email address to enrich with Dbot ccore.${Account.Email.Address}Optional
URLThe URL to enrich with Dbot score.${URL.Data}Optional
IPThe IP address to enrich with Dbot score.${IP.Address}Optional
MD5The MD5 hash of the file to enrich with Dbot score.${File.MD5}Optional
SHA1The SHA1 hash of the file to enrich with Dbot score.${File.SHA1}Optional
SHA256The SHA256 hash of the file to enrich with Dbot score.${File.SHA256}Optional

Playbook Outputs


PathDescriptionType
DBotScoreThe indicator's object.unknown
DBotScore.IndicatorThe indicator.string
DBotScore.TypeThe indicator type.string
DBotScore.VendorThe DBot score vendor.string
DBotScore.ScoreThe DBot score.number

Playbook Image


DBot_Indicator_Enrichment_Generic