Recorded Future IP Intelligence

IP Address Enrichment using Recorded Future Intelligence

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Recorded Future v2

Scripts

This playbook does not use any scripts.

Commands

  • recordedfuture-intelligence

Playbook Inputs


NameDescriptionDefault ValueRequired
IPThe IP address to enrich.IP.AddressOptional

Playbook Outputs


PathDescriptionType
DBotScore.IndicatorThe indicator that was testedstring
DBotScore.TypeIndicator typestring
DBotScore.VendorVendor used to calculate the scorestring
DBotScore.ScoreThe actual scorenumber
IP.AddressIP addressstring
IP.ASNASNstring
IP.Geo.CountryIP Geolocation Countrystring
RecordedFuture.IP.criticalityRisk Criticalitynumber
RecordedFuture.IP.criticalityLabelRisk Criticality Labelstring
RecordedFuture.IP.riskStringRisk Stringstring
RecordedFuture.IP.riskSummaryRisk Summarystring
RecordedFuture.IP.rulesRisk Rulesstring
RecordedFuture.IP.scoreRisk Scorenumber
RecordedFuture.IP.firstSeenEvidence First Seendate
RecordedFuture.IP.lastSeenEvidence Last Seendate
RecordedFuture.IP.intelCardRecorded Future Intelligence Card URLstring
RecordedFuture.IP.typeEntity Typestring
RecordedFuture.IP.nameEntitystring
RecordedFuture.IP.idRecorded Future Entity IDstring
RecordedFuture.IP.location.asnASN numberstring
RecordedFuture.IP.location.cidr.idRecorded Future CIDR IDstring
RecordedFuture.IP.location.cidr.nameCIDRstring
RecordedFuture.IP.location.cidr.typeCIDR Typestring
RecordedFuture.IP.location.location.cityIP Geolocation Citystring
RecordedFuture.IP.location.location.continentIP Geolocation Continentstring
RecordedFuture.IP.location.location.countryIP Geolocation Countrystring
RecordedFuture.IP.location.organizationIP Geolocation Organizationstring
RecordedFuture.IP.metrics.typeRecorded Future Metrics Typestring
RecordedFuture.IP.metrics.valueRecorded Future Metrics Valuenumber
RecordedFuture.IP.threatLists.descriptionRecorded Future Threat List Descriptionstring
RecordedFuture.IP.threatLists.idRecorded Future Threat List IDstring
RecordedFuture.IP.threatLists.nameRecorded Future Threat List Namestring
RecordedFuture.IP.threatLists.typeRecorded Future Threat List Typestring
RecordedFuture.IP.relatedEntities.RelatedAttacker.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedAttacker.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedAttacker.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedAttacker.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedTarget.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedTarget.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedTarget.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedTarget.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedThreatActor.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedThreatActor.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedThreatActor.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedThreatActor.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedMalware.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedMalware.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedMalware.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedMalware.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedIpAddress.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedIpAddress.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedIpAddress.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedIpAddress.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedProduct.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedProduct.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedProduct.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedProduct.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedCountries.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedCountries.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedCountries.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedCountries.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedHash.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedHash.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedHash.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedHash.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedTechnology.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedTechnology.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedTechnology.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedTechnology.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedEmailAddress.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedEmailAddress.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedEmailAddress.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedEmailAddress.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedAttackVector.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedAttackVector.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedAttackVector.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedAttackVector.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedOperations.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedOperations.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedOperations.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedOperations.typeRecorded Future Related Typestring
RecordedFuture.IP.relatedEntities.RelatedCompany.countRecorded Future Related Countnumber
RecordedFuture.IP.relatedEntities.RelatedCompany.idRecorded Future Related IDstring
RecordedFuture.IP.relatedEntities.RelatedCompany.nameRecorded Future Related Namestring
RecordedFuture.IP.relatedEntities.RelatedCompany.typeRecorded Future Related Typestring

Playbook Image


Recorded Future IP Intelligence