Indicator Enrichment - Infoblox Cloud

This playbook enriches IP addresses, MAC addresses, domains and URLs with the dossier, DHCP lease, TIDE and asset data using Infoblox Threat Defense with DDI integration.

Pack

InfobloxBloxOne

Tasks

14

Inputs

• ip_addresses — The optional comma-separated list of IP addresses to enrich.
• domains — The optional comma-separated list of domains or hosts to enrich.
• urls — The optional comma-separated list of URLs to enrich.
• mac_addresses — The optional comma-separated list of MAC addresses to enrich.

Commands used

• findIndicators