ACTI Incident Enrichment

This playbook enriches Intelligence Alerts, Intelligence Reports, Malware Families, Threat Actors, Threat Groups & Threat Campaigns

Pack

AccentureCTI

Tasks

14

Inputs

• ia_uuid
• ir_uuid
• MalwareFamily_uuid
• ThreatGroup_uuid
• ThreatCampaign_uuid
• ThreatActor_uuid

Commands used

• acti-get-fundamentals-by-uuid
• acti-getThreatIntelReport