Incident Enrichment Deprecated Hidden
Deprecated. We recommend using Default playbook instead. Enrich data with reputation from the incident. Data is extracted to the standard locations like File, URL, IP.
Deprecated Content (Deprecated) · 5 tasks · 0 inputs · 0 outputs
Details
| ID | Incident Enrichment |
|---|---|
| From Version | 5.0.0 |
| Tasks | 5 |
Flowchart
id: Incident Enrichment version: -1 name: Incident Enrichment system: true fromversion: 5.0.0 description: Deprecated. We recommend using Default playbook instead. Enrich data with reputation from the incident. Data is extracted to the standard locations like File, URL, IP. starttaskid: "0" hidden: true tasks: "0": id: "0" taskid: 37175990-2deb-4a44-8cdf-468f12cc97e3 type: start task: id: 37175990-2deb-4a44-8cdf-468f12cc97e3 version: -1 name: "" description: "" iscommand: false brand: "" nexttasks: '#none#': - "1" - "2" - "3" separatecontext: false view: |- { "position": { "x": 480, "y": 50 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "1": id: "1" taskid: 285982a4-a0f0-44b9-8730-79b07de3cb70 type: regular task: id: 285982a4-a0f0-44b9-8730-79b07de3cb70 version: -1 description: "" name: Collect hashes from the incident scriptName: ExtractHash type: regular iscommand: false brand: "" nexttasks: '#none#': - "4" scriptarguments: text: simple: ${incident} separatecontext: false view: |- { "position": { "x": 910, "y": 195 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "2": id: "2" taskid: de780391-3d5e-452d-8da0-53075cc3770d type: regular task: id: de780391-3d5e-452d-8da0-53075cc3770d version: -1 description: "" name: Collect IPs from the incident scriptName: ExtractIP type: regular iscommand: false brand: "" nexttasks: '#none#': - "4" scriptarguments: text: simple: ${incident} separatecontext: false view: |- { "position": { "x": 480, "y": 195 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "3": id: "3" taskid: cccb4d19-7cc7-46ee-85bd-4283b03ba932 type: regular task: id: cccb4d19-7cc7-46ee-85bd-4283b03ba932 version: -1 description: "" name: Collect URLs from the incident scriptName: ExtractURL type: regular iscommand: false brand: "" nexttasks: '#none#': - "4" scriptarguments: text: simple: ${incident} separatecontext: false view: |- { "position": { "x": 50, "y": 195 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "4": id: "4" taskid: cb6e468c-f551-41d4-82c5-25891ed171d7 type: playbook task: id: cb6e468c-f551-41d4-82c5-25891ed171d7 version: -1 description: "" name: "" playbookName: Enrichment Playbook type: playbook iscommand: false brand: "" separatecontext: false view: |- { "position": { "x": 480, "y": 370 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 view: |- { "linkLabelsPosition": {}, "paper": { "dimensions": { "height": 415, "width": 1240, "x": 50, "y": 50 } } } inputs: [] outputs: [] tests: - No tests - Deprecated deprecated: true