Recorded Future Domain Intelligence

Domain enrichment using Recorded Future intelligence

Pack

RecordedFuture

Tasks

7

Inputs

• Domain — The domain name to enrich.

Outputs

• DBotScore.Indicator — The indicator that was tested
• DBotScore.Type — Indicator type
• DBotScore.Vendor — Vendor used to calculate the score
• DBotScore.Score — The actual score
• Domain.Name — Domain name
• RecordedFuture.Domain.criticality — Risk Criticality
• RecordedFuture.Domain.criticalityLabel — Risk Criticality Label
• RecordedFuture.Domain.riskString — Risk String
• RecordedFuture.Domain.riskSummary — Risk Summary
• RecordedFuture.Domain.rules — Risk Rules
• RecordedFuture.Domain.score — Risk Score
• RecordedFuture.Domain.firstSeen — Evidence First Seen
• RecordedFuture.Domain.lastSeen — Evidence Last Seen
• RecordedFuture.Domain.intelCard — Recorded Future Intelligence Card URL
• RecordedFuture.Domain.type — Entity Type
• RecordedFuture.Domain.name — Entity
• RecordedFuture.Domain.id — Recorded Future Entity ID
• RecordedFuture.Domain.metrics.type — Recorded Future Metrics Type
• RecordedFuture.Domain.metrics.value — Recorded Future Metrics Value
• RecordedFuture.Domain.threatLists.description — Recorded Future Threat List Description
• RecordedFuture.Domain.threatLists.id — Recorded Future Threat List ID
• RecordedFuture.Domain.threatLists.name — Recorded Future Threat List Name
• RecordedFuture.Domain.threatLists.type — Recorded Future Threat List Type
• RecordedFuture.Domain.relatedEntities.RelatedAttacker.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedAttacker.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedAttacker.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedAttacker.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedTarget.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedTarget.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedTarget.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedTarget.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedThreatActor.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedThreatActor.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedThreatActor.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedThreatActor.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedMalware.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedMalware.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedMalware.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedMalware.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedCyberVulnerability.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedCyberVulnerability.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedCyberVulnerability.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedCyberVulnerability.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedIpAddress.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedIpAddress.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedIpAddress.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedIpAddress.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedInternetDomainName.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedInternetDomainName.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedInternetDomainName.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedInternetDomainName.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedProduct.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedProduct.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedProduct.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedProduct.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedCountries.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedCountries.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedCountries.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedCountries.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedHash.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedHash.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedHash.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedHash.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedTechnology.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedTechnology.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedTechnology.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedTechnology.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedEmailAddress.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedEmailAddress.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedEmailAddress.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedEmailAddress.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedAttackVector.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedAttackVector.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedAttackVector.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedAttackVector.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedMalwareCategory.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedMalwareCategory.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedMalwareCategory.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedMalwareCategory.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedOperations.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedOperations.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedOperations.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedOperations.type — Recorded Future Related Type
• RecordedFuture.Domain.relatedEntities.RelatedCompany.count — Recorded Future Related Count
• RecordedFuture.Domain.relatedEntities.RelatedCompany.id — Recorded Future Related ID
• RecordedFuture.Domain.relatedEntities.RelatedCompany.name — Recorded Future Related Name
• RecordedFuture.Domain.relatedEntities.RelatedCompany.type — Recorded Future Related Type

Commands used

• recordedfuture-intelligence
• setIndicator