Domain Enrichment - Infoblox Cloud

This playbook enriches domains or hosts with the dossier, TIDE and asset data using Infoblox Threat Defense with DDI integration.

Infoblox Threat Defense with DDI · 10 tasks · 1 input · 0 outputs

Inputs

  • domains — The optional comma-separated list of domains or hosts to enrich.

Commands used

bloxone-td-dossier-lookup-get domain findIndicators

Flowchart

yes yes yes yes Start Start Is Infoblox Threat Defense with DDI integration enabled? Is Infoblox Threat Defens... Clear previous inputs - DeleteContext Clear previous inputs DeleteContext Fetch Indicators from Incident - findIndicators Fetch Indicators from Inc... findIndicators Get reputation for domain indicators - domain Get reputation for domain... domain Done Done Check whether domains are available in playbook input Check whether domains are... Check for indicators Check for indicators Check that domain indicators are present or not Check that domain indicat... Get dossier information for domain indicators - bloxone-td-dossier-lookup-get Get dossier information f... bloxone-td-dossier-lookup-get