Indicator Enrichment - Censys

This playbook enriches the IP addresses, domains, and SHA256 file hashes indicators with Censys threat intelligence data.

Censys · 16 tasks · 3 inputs · 0 outputs

Inputs

  • ip_addresses — Specify the IP address(es) to enrich.
  • domains — Specify the domain(s) to enrich.
  • file_hashes — Specify the SHA256 file hash(es) to enrich.

Commands used

cen-search domain findIndicators ip

Flowchart

yes yes Collect Extract yes yes yes yes Start Start Is Censys v2 integration enabled? Is Censys v2 integration ... Clear previous inputs - DeleteContext Clear previous inputs DeleteContext Extract the indicators. - findIndicators Extract the indicators. findIndicators Check whether IP addresses, domains or file hashes are available in playbook input Check whether IP addresse... Enrich the indicators. Enrich the indicators. Collect the IP address, domain and SHA256 file indicators values. Collect the IP address, d... Collect or Extract Indicators? Collect or Extract Indica... Check indicators availability. Check indicators availabi... Enrich the IP address indicator - ip Enrich the IP address ind... ip Check that IP address indicators are present or not Check that IP address ind... Check that domain indicators are present or not Check that domain indicat... Check that SHA256 file hash indicators are present or not Check that SHA256 file ha... Enrich the Domain indicator - domain Enrich the Domain indicator domain Enrich the SHA256 file hash indicator - cen-search Enrich the SHA256 file ha... cen-search Done Done