IOC Curated Enrichment - Google Threat Intelligence

This playbook provides IOC curated enrichment using Google Threat Intelligence data, including malware families, campaigns, and threat actors, and displays the results in the War Room for investigation.

Pack

GoogleThreatIntelligence

Tasks

11

Inputs

• resource — The file hash (MD5, SHA1, or SHA256), Domain, URL or IP.
• resource_type — The type of the resource (IP, domain, URL, or file hash).

Commands used

• gti-curated-campaigns-get
• gti-curated-malware-families-get
• gti-curated-threat-actors-get