IP Enrichment - Infoblox Cloud

This playbook enriches IP addresses with the dossier, TIDE and asset data using Infoblox Threat Defense with DDI integration.

Infoblox Threat Defense with DDI · 10 tasks · 1 input · 0 outputs

Inputs

  • ip_addresses — The optional comma-separated list of IP addresses to enrich.

Commands used

bloxone-td-dossier-lookup-get findIndicators ip

Flowchart

yes yes yes yes Start Start Is Infoblox Threat Defense with DDI integration enabled? Is Infoblox Threat Defens... Clear previous inputs - DeleteContext Clear previous inputs DeleteContext Fetch Indicators from Incident - findIndicators Fetch Indicators from Inc... findIndicators Get reputation for IP indicators - ip Get reputation for IP ind... ip Done Done Check whether IPs are available in playbook input Check whether IPs are ava... Check for indicators Check for indicators Check that IP indicators are present or not Check that IP indicators ... Get dossier information for IP indicators - bloxone-td-dossier-lookup-get Get dossier information f... bloxone-td-dossier-lookup-get