ACTI Incident Enrichment

This playbook enriches Intelligence Alerts, Intelligence Reports, Malware Families, Threat Actors, Threat Groups & Threat Campaigns

Accenture CTI v2 · 14 tasks · 6 inputs · 0 outputs

Inputs

  • ia_uuid —
  • ir_uuid —
  • MalwareFamily_uuid —
  • ThreatGroup_uuid —
  • ThreatCampaign_uuid —
  • ThreatActor_uuid —

Commands used

acti-get-fundamentals-by-uuid acti-getThreatIntelReport

Flowchart

yes yes yes yes yes yes Start Start Enrich IA - acti-getThreatIntelReport Enrich IA acti-getThreatIntelReport END END Enrich IR - acti-getThreatIntelReport Enrich IR acti-getThreatIntelReport Enrich Malware Family - acti-get-fundamentals-by-uuid Enrich Malware Family acti-get-fundamentals-by-uuid Enrich Threat Group - acti-get-fundamentals-by-uuid Enrich Threat Group acti-get-fundamentals-by-uuid Enrich Threat Actor - acti-get-fundamentals-by-uuid Enrich Threat Actor acti-get-fundamentals-by-uuid Enrich Threat Campaign - acti-get-fundamentals-by-uuid Enrich Threat Campaign acti-get-fundamentals-by-uuid Is IA present? Is IA present? Is IR present? Is IR present? Is Malware Family present? Is Malware Family present? Is Threat Group present? Is Threat Group present? Is Threat Actor present? Is Threat Actor present? Is Threat Campaign present? Is Threat Campaign present?