IOC Enrichment and Blocking - Google SecOps

This playbook enriches IOCs using the enrichment commands (IP, Email, Domain, URL, and File) and blocks the malicious IOCs based on DBot Score.

Pack

GoogleChronicleBackstory

Tasks

32

Commands used

• domain
• email
• file
• findIndicators
• ip
• url