Block Domain - Generic v2

This playbook blocks malicious Domains using all integrations that are enabled. Supported integrations for this playbook: * Zscaler * Symantec Messaging Gateway * FireEye EX * Trend Micro Apex One * Proofpoint Threat Response * Cisco Stealthwatch Cloud

Common Playbooks · 9 tasks · 4 inputs · 0 outputs

Inputs

  • Domain — The Domain to block.
  • DomainBlackListID — The Domain List ID to add the Domain to. product: Proofpoint Threat Response
  • Tag — Tag to assign Domain to the External Dynamic List. sub-playbook: Block Domain - External Dynamic List
  • Expiration — The UTC expiration date and time of the suspicious object, for example: 2020-01-25T09:00:00Z. Products: Trend Micro Apex One Proofpoint Threat Response

Flowchart

Start Start Block Domain - Symantec Messaging Gateway - Block Domain - Symantec Messaging Gateway Block Domain - Symantec M... Block Domain - Symantec Messa... Block Domain - FireEye Email Security - Block Domain - FireEye Email Security Block Domain - FireEye Em... Block Domain - FireEye Email ... Block Domain - Zscaler - Block Domain - Zscaler Block Domain - Zscaler Block Domain - Zscaler Done Done Block Domain - Trend Micro Apex One - Block Domain - Trend Micro Apex One Block Domain - Trend Micr... Block Domain - Trend Micro Ap... Block Domain - Proofpoint Threat Response - Block Domain - Proofpoint Threat Response Block Domain - Proofpoint... Block Domain - Proofpoint Thr... Block Domain - Cisco Stealthwatch - Block Domain - Cisco Stealthwatch Block Domain - Cisco Stea... Block Domain - Cisco Stealthw... Block Domain - External Dynamic List - Block Domain - External Dynamic List Block Domain - External D... Block Domain - External Dynam...