Darkmon - Block IOC

Analyst-facing wrapper around Darkmon - Generic Block Indicator. Lets analysts paste an IOC into a War Room form and trigger a provider-routed block action.

Darkmon · 4 tasks · 3 inputs · 0 outputs

Inputs

  • Indicator — The indicator value to block.
  • Type — ip | domain | url.
  • Reason — Reason annotated on the block rule.

Flowchart

Start Start Dispatch block via provider switchboard - Darkmon - Generic Block Indicator Dispatch block via provid... Darkmon - Generic Block Indic... Notify SOC of manual block - Darkmon - Generic Notify Notify SOC of manual block Darkmon - Generic Notify Done Done