Email Address Enrichment - Generic

Deprecated

DEPRECATED. Use "Email Address Enrichment - Generic v2.1" playbook instead. Gets an email addresses's reputation using one or more integrations.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

  • EmailDomainSquattingReputation
  • IsEmailAddressInternal
  • ADGetUser
  • Exists
  • EmailReputation

Commands

This playbook does not use any commands.

Playbook Inputs


NameDescriptionDefault ValueSourceRequired
DomainThe list of internal domains.--Optional
EmailThe email addresses to enrich.Email.AddressAccountOptional
GetReputationWhether the playbook should get the reputation for the email address.True-Required

Playbook Outputs


PathDescriptionType
AccountThe account's object.unknown
Account.Email.AddressThe email account's full address.string
Account.GroupsThe groups the account is part of.string
Account.Email.DomainThe email's account domain.string
Account.Email.NetworkTypeThe email account's networktype. Can be, "Internal" or "External".string
Account.TypeThe type of the account entity.string
Account.Email.UsernameThe email account username.string
Account.IDThe unique Account DN (Distinguished Name).string
Account.DisplayNameThe account display name.string
Account.ManagerThe account's manager.string
Account.Email.Distance.DomainThe compared domain.string
Account.Email.Distance.ValueThe distance between the email domain and the compared domain.number
DBotScore.IndicatorThe indicator.string
DBotScoreThe DBotScore's object.unknown
DBotScore.TypeThe indicator type.string
DBotScore.VendorThe DBot score vendor.string
DBotScore.ScoreThe DBot score.number

Playbook Image


Email_Address_Enrichment_Generic