Extract Indicators - Generic

Deprecated

We recommend using extractIndicators command instead

Deprecated

We recommend using extractIndicators command instead.

Extracts indicators from input data.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

  • ExtractDomain
  • ExtractEmail
  • ExtractURL
  • ExtractHash
  • ExtractIP

Commands

This playbook does not use any commands.

Playbook Inputs


NameDescriptionDefault ValueRequired
incidentThe incident used the integration.${incident}Optional

Playbook Outputs


PathDescriptionType
File.MD5The extracted MD5 hash of the file.string
File.SHA1The extracted SHA1 hash of the file.string
File.SHA256The extracted SHA256 hash of the file.string
URL.DataThe extracted URLs.string
IP.AddressThe extracted IP addresses.string
Domain.NameThe extracted domains.string
Account.Email.AddressThe extracted emails.string

Playbook Image


Extract_Indicators_Generic