URL Enrichment - Generic

Enriches a URL using one or more integrations.

URL enrichment includes:

  • Verify URL SSL
  • Threat information
  • URL reputaiton
  • Take URL screenshot

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • VirusTotal - Private API
  • Rasterize

Scripts

  • URLSSLVerification
  • URLReputation
  • Exists

Commands

  • vt-private-get-url-report
  • rasterize

Playbook Inputs


NameDescriptionDefault ValueSourceRequired
urlThe URL to enrich.DataURLOptional
RasterizeWhether the system should take safe screenshots of input URLs.False-Optional
VerifyURLWhether the system should verify the input URLs.False-Optional
GetReputationWhether the playbook should get the reputation for the URL.True-Required

Playbook Outputs


PathDescriptionType
URLThe URL's object.uknown
URL.DataThe enriched URL.string
DBotScoreThe DBotScore.unknown
URL.MaliciousWhether the URL was detected as malicious.unknown
URL.VendorThe name of vendor who labeled the URL as malicious.string
URL.DescriptionThe additional info on the URL.string

Playbook Image


URL_Enrichment_Generic