Recorded Future Entity Enrichment

Template playbook to incorporate Recorded Future enrichment for IPs, Hashes, Domains, URLs into your current workflows. Playbook also shows how to look up available 'Links' data for IOCs.

Pack

RecordedFuture

Tasks

22

Inputs

• MD5 — File MD5 hash to enrich.
• SHA256 — The file SHA256 hash to enrich.
• SHA1 — The file SHA1 hash to enrich.
• IP — The IP Address to enrich.
• Domain — The Domain name to enrich.
• URL — The URL to enrich.

Outputs

• DBotScore.Indicator — The indicator that was tested.
• DBotScore.Type — The indicator type.
• DBotScore — The DBotScore object.
• DBotScore.Vendor — Vendor used to calculate the score.
• DBotScore.Score — The actual score.

Commands used

• recordedfuture-intelligence
• recordedfuture-links