IOCs Curated Threat Intelligence Enrichment - Google Threat Intelligence

This playbook extracts IOCs from incident details and enriches the selected IOCs with curated Google Threat Intelligence data, including malware families, campaigns, and threat actors.

GoogleThreatIntelligence · 14 tasks · 0 inputs · 0 outputs

Commands used

findIndicators

Flowchart

yes yes yes yes yes Start Start Is Google Threat Intelligence integration enabled? Is Google Threat Intellig... Clear previous inputs - DeleteContext Clear previous inputs DeleteContext Found indicators from Incident - findIndicators Found indicators from Inc... findIndicators IOCs Selection for Curated Threat Intelligence Enrichment IOCs Selection for Curate... Is IPs are present in selection? Is IPs are present in sel... Is Domains are present in selection? Is Domains are present in... Done Done Is URLs are present in selection? Is URLs are present in se... Is Files are present in selection? Is Files are present in s... IOC Curated Enrichment - Google Threat Intelligence - IOC Curated Enrichment - Google Threat Intelligence IOC Curated Enrichment - ... IOC Curated Enrichment - Goog... IOC Curated Enrichment - Google Threat Intelligence - IOC Curated Enrichment - Google Threat Intelligence IOC Curated Enrichment - ... IOC Curated Enrichment - Goog... IOC Curated Enrichment - Google Threat Intelligence - IOC Curated Enrichment - Google Threat Intelligence IOC Curated Enrichment - ... IOC Curated Enrichment - Goog... IOC Curated Enrichment - Google Threat Intelligence - IOC Curated Enrichment - Google Threat Intelligence IOC Curated Enrichment - ... IOC Curated Enrichment - Goog...