Recorded Future CVE Intelligence

CVE enrichment using Recorded Future intelligence

Recorded Future Intelligence · 7 tasks · 1 input · 87 outputs

Details

IDRecorded Future CVE Intelligence
From Version5.0.0
Tasks7

README

CVE Enrichment using Recorded Future Intelligence

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts. Depends on the recorded futures indicator field risk rules.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Recorded Future v2

Scripts

This playbook does not use any scripts.

Commands

  • recordedfuture-intelligence

Playbook Inputs

Name Description Default Value Required
CVE The CVE ID to enrich. CVE.ID Optional

Playbook Outputs

Path Description Type
DBotScore.Indicator The indicator that was tested string
DBotScore.Type Indicator type string
DBotScore.Vendor Vendor used to calculate the score string
DBotScore.Score The actual score number
CVE.ID Vulnerability name string
RecordedFuture.CVE.criticality Risk Criticality number
RecordedFuture.CVE.criticalityLabel Risk Criticality Label string
RecordedFuture.CVE.riskString Risk String string
RecordedFuture.CVE.riskSummary Risk Summary string
RecordedFuture.CVE.rules Risk Rules string
RecordedFuture.CVE.score Risk Score number
RecordedFuture.CVE.firstSeen Evidence First Seen date
RecordedFuture.CVE.lastSeen Evidence Last Seen date
RecordedFuture.CVE.intelCard Recorded Future Intelligence Card URL string
RecordedFuture.CVE.type Entity Type string
RecordedFuture.CVE.name Entity string
RecordedFuture.CVE.id Recorded Future Entity ID string
RecordedFuture.CVE.metrics.type Recorded Future Metrics Type String
RecordedFuture.CVE.metrics.value Recorded Future Metrics Value Number
RecordedFuture.CVE.threatLists.description Recorded Future Threat List Description String
RecordedFuture.CVE.threatLists.id Recorded Future Threat List ID String
RecordedFuture.CVE.threatLists.name Recorded Future Threat List Name String
RecordedFuture.CVE.threatLists.type Recorded Future Threat List Type String
RecordedFuture.CVE.relatedEntities.RelatedAttacker.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedAttacker.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedAttacker.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedAttacker.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedTarget.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedTarget.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedTarget.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedTarget.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedThreatActor.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedThreatActor.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedThreatActor.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedThreatActor.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedMalware.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedMalware.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedMalware.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedMalware.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedIpAddress.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedIpAddress.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedIpAddress.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedIpAddress.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedProduct.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedProduct.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedProduct.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedProduct.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedCountries.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedCountries.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedCountries.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedCountries.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedHash.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedHash.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedHash.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedHash.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedTechnology.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedTechnology.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedTechnology.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedTechnology.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedAttackVector.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedAttackVector.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedAttackVector.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedAttackVector.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedOperations.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedOperations.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedOperations.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedOperations.type Recorded Future Related Type String
RecordedFuture.CVE.relatedEntities.RelatedCompany.count Recorded Future Related Count Number
RecordedFuture.CVE.relatedEntities.RelatedCompany.id Recorded Future Related ID String
RecordedFuture.CVE.relatedEntities.RelatedCompany.name Recorded Future Related Name String
RecordedFuture.CVE.relatedEntities.RelatedCompany.type Recorded Future Related Type String

Playbook Image

Recorded Future CVE Intelligence

Inputs

  • CVE — The CVE ID to enrich.

Outputs

  • DBotScore.Indicator — The indicator that was tested
  • DBotScore.Type — Indicator type
  • DBotScore.Vendor — Vendor used to calculate the score
  • DBotScore.Score — The actual score
  • CVE.ID — Vulnerability name
  • RecordedFuture.CVE.criticality — Risk Criticality
  • RecordedFuture.CVE.criticalityLabel — Risk criticality label
  • RecordedFuture.CVE.riskString — Risk string
  • RecordedFuture.CVE.riskSummary — Risk summary
  • RecordedFuture.CVE.rules — Risk rules
  • RecordedFuture.CVE.score — Risk score
  • RecordedFuture.CVE.firstSeen — Evidence first seen
  • RecordedFuture.CVE.lastSeen — Evidence Last Seen
  • RecordedFuture.CVE.intelCard — Recorded Future intelligence card URL
  • RecordedFuture.CVE.type — Entity type
  • RecordedFuture.CVE.name — Entity
  • RecordedFuture.CVE.id — Recorded Future entity ID
  • RecordedFuture.CVE.metrics.type — Recorded Future metrics type
  • RecordedFuture.CVE.metrics.value — Recorded Future metrics value
  • RecordedFuture.CVE.threatLists.description — Recorded Future threat list description
  • RecordedFuture.CVE.threatLists.id — Recorded Future threat list ID
  • RecordedFuture.CVE.threatLists.name — Recorded Future threat list name
  • RecordedFuture.CVE.threatLists.type — Recorded Future threat list type
  • RecordedFuture.CVE.relatedEntities.RelatedAttacker.count — Recorded Future related count
  • RecordedFuture.CVE.relatedEntities.RelatedAttacker.id — Recorded Future related ID
  • RecordedFuture.CVE.relatedEntities.RelatedAttacker.name — Recorded Future related name
  • RecordedFuture.CVE.relatedEntities.RelatedAttacker.type — Recorded Future related type
  • RecordedFuture.CVE.relatedEntities.RelatedTarget.count — Recorded Future related entity count
  • RecordedFuture.CVE.relatedEntities.RelatedTarget.id — Recorded Future related entity ID
  • RecordedFuture.CVE.relatedEntities.RelatedTarget.name — Recorded Future related target name
  • RecordedFuture.CVE.relatedEntities.RelatedTarget.type — Recorded Future related target type
  • RecordedFuture.CVE.relatedEntities.RelatedThreatActor.count — Recorded Future related threat actor count
  • RecordedFuture.CVE.relatedEntities.RelatedThreatActor.id — Recorded Future related threat actor ID
  • RecordedFuture.CVE.relatedEntities.RelatedThreatActor.name — Recorded Future related threat actor name
  • RecordedFuture.CVE.relatedEntities.RelatedThreatActor.type — Recorded Future related threat actor type
  • RecordedFuture.CVE.relatedEntities.RelatedMalware.count — Recorded Future related malware count
  • RecordedFuture.CVE.relatedEntities.RelatedMalware.id — Recorded Future related malware ID
  • RecordedFuture.CVE.relatedEntities.RelatedMalware.name — Recorded Future related malware name
  • RecordedFuture.CVE.relatedEntities.RelatedMalware.type — Recorded Future related malware type
  • RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.count — Recorded Future related vulnerability count
  • RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.id — Recorded Future related vulnerability ID
  • RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.name — Recorded Future related vulnerability name
  • RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.type — Recorded Future related vulnerability type
  • RecordedFuture.CVE.relatedEntities.RelatedIpAddress.count — Recorded Future related IP address Count
  • RecordedFuture.CVE.relatedEntities.RelatedIpAddress.id — Recorded Future related IP address ID
  • RecordedFuture.CVE.relatedEntities.RelatedIpAddress.name — Recorded Future related IP address Name
  • RecordedFuture.CVE.relatedEntities.RelatedIpAddress.type — Recorded Future related IP address type
  • RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.count — Recorded Future related domain name count
  • RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.id — Recorded Future related domain name ID
  • RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.name — Recorded Future related domain name name
  • RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.type — Recorded Future related domain name type
  • RecordedFuture.CVE.relatedEntities.RelatedProduct.count — Recorded Future related product count
  • RecordedFuture.CVE.relatedEntities.RelatedProduct.id — Recorded Future related product ID
  • RecordedFuture.CVE.relatedEntities.RelatedProduct.name — Recorded Future related product name
  • RecordedFuture.CVE.relatedEntities.RelatedProduct.type — Recorded Future related product type
  • RecordedFuture.CVE.relatedEntities.RelatedCountries.count — Recorded Future related countries count
  • RecordedFuture.CVE.relatedEntities.RelatedCountries.id — Recorded Future related countries ID
  • RecordedFuture.CVE.relatedEntities.RelatedCountries.name — Recorded Future related countries name
  • RecordedFuture.CVE.relatedEntities.RelatedCountries.type — Recorded Future related countries' type
  • RecordedFuture.CVE.relatedEntities.RelatedHash.count — Recorded Future related hash count
  • RecordedFuture.CVE.relatedEntities.RelatedHash.id — Recorded Future related hash ID
  • RecordedFuture.CVE.relatedEntities.RelatedHash.name — Recorded Future related hash name
  • RecordedFuture.CVE.relatedEntities.RelatedHash.type — Recorded Future related hash type
  • RecordedFuture.CVE.relatedEntities.RelatedTechnology.count — Recorded Future related technology count
  • RecordedFuture.CVE.relatedEntities.RelatedTechnology.id — Recorded Future related technology ID
  • RecordedFuture.CVE.relatedEntities.RelatedTechnology.name — Recorded Future related technology name
  • RecordedFuture.CVE.relatedEntities.RelatedTechnology.type — Recorded Future related technology type
  • RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.count — Recorded Future related email address count
  • RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.id — Recorded Future related email address ID
  • RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.name — Recorded Future related email address name
  • RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.type — Recorded Future related email address type
  • RecordedFuture.CVE.relatedEntities.RelatedAttackVector.count — Recorded Future related attack vector count
  • RecordedFuture.CVE.relatedEntities.RelatedAttackVector.id — Recorded Future related attack vector ID
  • RecordedFuture.CVE.relatedEntities.RelatedAttackVector.name — Recorded Future related attack vector name
  • RecordedFuture.CVE.relatedEntities.RelatedAttackVector.type — Recorded Future related attack vector type
  • RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.count — Recorded Future related malware category count
  • RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.id — Recorded Future related malware category ID
  • RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.name — Recorded Future related malware category name
  • RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.type — Recorded Future related malware category type
  • RecordedFuture.CVE.relatedEntities.RelatedOperations.count — Recorded Future related operations count
  • RecordedFuture.CVE.relatedEntities.RelatedOperations.id — Recorded Future related operations ID
  • RecordedFuture.CVE.relatedEntities.RelatedOperations.name — Recorded Future related operations name
  • RecordedFuture.CVE.relatedEntities.RelatedOperations.type — Recorded Future related operations type
  • RecordedFuture.CVE.relatedEntities.RelatedCompany.count — Recorded Future related company count
  • RecordedFuture.CVE.relatedEntities.RelatedCompany.id — Recorded Future related company ID
  • RecordedFuture.CVE.relatedEntities.RelatedCompany.name — Recorded Future related company name
  • RecordedFuture.CVE.relatedEntities.RelatedCompany.type — Recorded Future related company type

Commands used

recordedfuture-intelligence setIndicator

Flowchart

yes yes Start Start Is there a CVE ID to enrich? Is there a CVE ID to enrich? Done Done Is Recorded Future API enabled? Is Recorded Future API en... Get CVE ID intelligence from Recorded Future - recordedfuture-intelligence Get CVE ID intelligence f... recordedfuture-intelligence Enrich Using Recorded Future API Enrich Using Recorded Fut... setIndicator - setIndicator setIndicator setIndicator

Source

playbook-Recorded_Future_CVE_Intelligence.yml
Download History Raw 
id: Recorded Future CVE Intelligence
version: -1
name: Recorded Future CVE Intelligence
description: CVE enrichment using Recorded Future intelligence
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: ce492b1f-e7ee-4054-8566-76878ba15d9b
    type: start
    task:
      id: ce492b1f-e7ee-4054-8566-76878ba15d9b
      version: -1
      name: ""
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "16"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 50
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "16":
    id: "16"
    taskid: b9d5cb95-ec78-4bb2-8295-62142f0fff7a
    type: condition
    task:
      id: b9d5cb95-ec78-4bb2-8295-62142f0fff7a
      version: -1
      name: Is there a CVE ID to enrich?
      description: Checks whether the playbook's input contains at least one CVE name
        to enrich.
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "24"
      "yes":
      - "29"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isExists
          left:
            value:
              simple: inputs.CVE
            iscontext: true
    view: |-
      {
        "position": {
          "x": 50,
          "y": 195
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "24":
    id: "24"
    taskid: cceadd7f-1205-44de-88f0-429a50648adc
    type: title
    task:
      id: cceadd7f-1205-44de-88f0-429a50648adc
      version: -1
      name: Done
      type: title
      iscommand: false
      brand: ""
      description: ''
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 995
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "26":
    id: "26"
    taskid: 6475f25d-0750-4a83-8a98-96a74a5c80ea
    type: condition
    task:
      id: 6475f25d-0750-4a83-8a98-96a74a5c80ea
      version: -1
      name: Is Recorded Future API enabled?
      description: Checks if there is an active instance of the Recorded Future API
        integration enabled.
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "24"
      "yes":
      - "28"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isExists
          left:
            value:
              complex:
                root: modules
                filters:
                - - operator: containsString
                    left:
                      value:
                        simple: modules.brand
                      iscontext: true
                    right:
                      value:
                        simple: Recorded Future v2
                    ignorecase: true
                - - operator: isEqualString
                    left:
                      value:
                        simple: modules.state
                      iscontext: true
                    right:
                      value:
                        simple: active
                    ignorecase: true
                accessor: brand
            iscontext: true
    view: |-
      {
        "position": {
          "x": 410,
          "y": 505
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "28":
    id: "28"
    taskid: 7568908c-9783-4b2f-8763-9f45c4138a34
    type: regular
    task:
      id: 7568908c-9783-4b2f-8763-9f45c4138a34
      version: -1
      name: Get CVE ID intelligence from Recorded Future
      description: Get threat intelligence for an IP, domain, cve, url or file.
      script: Recorded Future v2|||recordedfuture-intelligence
      type: regular
      iscommand: true
      brand: Recorded Future v2
    nexttasks:
      '#none#':
      - "30"
    scriptarguments:
      entity:
        simple: ${inputs.CVE}
      entity_type:
        simple: cve
      fetch_related_entities:
        simple: "yes"
      fetch_riskyCIDRips:
        simple: "no"
    reputationcalc: 1
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 410,
          "y": 690
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "29":
    id: "29"
    taskid: 705526fa-f3be-413b-84cd-1a928a5c0ef7
    type: title
    task:
      id: 705526fa-f3be-413b-84cd-1a928a5c0ef7
      version: -1
      name: Enrich Using Recorded Future API
      type: title
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "26"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 410,
          "y": 370
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "30":
    id: "30"
    taskid: ea56617e-9f03-47e2-854e-9a1e9789eb01
    type: regular
    task:
      id: ea56617e-9f03-47e2-854e-9a1e9789eb01
      version: -1
      name: setIndicator
      description: Change the properties of an indicator
      script: Builtin|||setIndicator
      type: regular
      iscommand: true
      brand: Builtin
    nexttasks:
      '#none#':
      - "24"
    scriptarguments:
      recordedfutureriskrules:
        simple: ${RecordedFuture.CVE.concatRules}
      value:
        simple: ${inputs.CVE}
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 410,
          "y": 820
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
view: |-
  {
    "linkLabelsPosition": {
      "16_24_#default#": 0.57,
      "26_24_#default#": 0.55,
      "26_28_yes": 0.61
    },
    "paper": {
      "dimensions": {
        "height": 1010,
        "width": 740,
        "x": 50,
        "y": 50
      }
    }
  }
inputs:
- key: CVE
  value:
    complex:
      root: CVE
      accessor: ID
  required: false
  description: The CVE ID to enrich.
  playbookInputQuery:
outputs:
- contextPath: DBotScore.Indicator
  description: The indicator that was tested
  type: string
- contextPath: DBotScore.Type
  description: Indicator type
  type: string
- contextPath: DBotScore.Vendor
  description: Vendor used to calculate the score
  type: string
- contextPath: DBotScore.Score
  description: The actual score
  type: number
- contextPath: CVE.ID
  description: Vulnerability name
  type: string
- contextPath: RecordedFuture.CVE.criticality
  description: Risk Criticality
  type: number
- contextPath: RecordedFuture.CVE.criticalityLabel
  description: Risk criticality label
  type: string
- contextPath: RecordedFuture.CVE.riskString
  description: Risk string
  type: string
- contextPath: RecordedFuture.CVE.riskSummary
  description: Risk summary
  type: string
- contextPath: RecordedFuture.CVE.rules
  description: Risk rules
  type: string
- contextPath: RecordedFuture.CVE.score
  description: Risk score
  type: number
- contextPath: RecordedFuture.CVE.firstSeen
  description: Evidence first seen
  type: date
- contextPath: RecordedFuture.CVE.lastSeen
  description: Evidence Last Seen
  type: date
- contextPath: RecordedFuture.CVE.intelCard
  description: Recorded Future intelligence card URL
  type: string
- contextPath: RecordedFuture.CVE.type
  description: Entity type
  type: string
- contextPath: RecordedFuture.CVE.name
  description: Entity
  type: string
- contextPath: RecordedFuture.CVE.id
  description: Recorded Future entity ID
  type: string
- contextPath: RecordedFuture.CVE.metrics.type
  description: Recorded Future metrics type
  type: String
- contextPath: RecordedFuture.CVE.metrics.value
  description: Recorded Future metrics value
  type: Number
- contextPath: RecordedFuture.CVE.threatLists.description
  description: Recorded Future threat list description
  type: String
- contextPath: RecordedFuture.CVE.threatLists.id
  description: Recorded Future threat list ID
  type: String
- contextPath: RecordedFuture.CVE.threatLists.name
  description: Recorded Future threat list name
  type: String
- contextPath: RecordedFuture.CVE.threatLists.type
  description: Recorded Future threat list type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedAttacker.count
  description: Recorded Future related count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedAttacker.id
  description: Recorded Future related ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedAttacker.name
  description: Recorded Future related name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedAttacker.type
  description: Recorded Future related type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedTarget.count
  description: Recorded Future related entity count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedTarget.id
  description: Recorded Future related entity ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedTarget.name
  description: Recorded Future related target name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedTarget.type
  description: Recorded Future related target type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedThreatActor.count
  description: Recorded Future related threat actor count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedThreatActor.id
  description: Recorded Future related threat actor ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedThreatActor.name
  description: Recorded Future related threat actor name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedThreatActor.type
  description: Recorded Future related threat actor type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedMalware.count
  description: Recorded Future related malware count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedMalware.id
  description: Recorded Future related malware ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedMalware.name
  description: Recorded Future related malware name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedMalware.type
  description: Recorded Future related malware type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.count
  description: Recorded Future related vulnerability count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.id
  description: Recorded Future related vulnerability ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.name
  description: Recorded Future related vulnerability name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCyberVulnerability.type
  description: Recorded Future related vulnerability type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedIpAddress.count
  description: Recorded Future related IP address Count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedIpAddress.id
  description: Recorded Future related IP address ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedIpAddress.name
  description: Recorded Future related IP address Name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedIpAddress.type
  description: Recorded Future related IP address type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.count
  description: Recorded Future related domain name count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.id
  description: Recorded Future related domain name ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.name
  description: Recorded Future related domain name name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedInternetDomainName.type
  description: Recorded Future related domain name type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedProduct.count
  description: Recorded Future related product count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedProduct.id
  description: Recorded Future related product ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedProduct.name
  description: Recorded Future related product name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedProduct.type
  description: Recorded Future related product type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCountries.count
  description: Recorded Future related countries count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCountries.id
  description: Recorded Future related countries ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCountries.name
  description: Recorded Future related countries name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCountries.type
  description: Recorded Future related countries' type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedHash.count
  description: Recorded Future related hash count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedHash.id
  description: Recorded Future related hash ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedHash.name
  description: Recorded Future related hash name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedHash.type
  description: Recorded Future related hash type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedTechnology.count
  description: Recorded Future related technology count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedTechnology.id
  description: Recorded Future related technology ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedTechnology.name
  description: Recorded Future related technology name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedTechnology.type
  description: Recorded Future related technology type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.count
  description: Recorded Future related email address count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.id
  description: Recorded Future related email address ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.name
  description: Recorded Future related email address name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedEmailAddress.type
  description: Recorded Future related email address type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedAttackVector.count
  description: Recorded Future related attack vector count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedAttackVector.id
  description: Recorded Future related attack vector ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedAttackVector.name
  description: Recorded Future related attack vector name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedAttackVector.type
  description: Recorded Future related attack vector type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.count
  description: Recorded Future related malware category count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.id
  description: Recorded Future related malware category ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.name
  description: Recorded Future related malware category name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedMalwareCategory.type
  description: Recorded Future related malware category type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedOperations.count
  description: Recorded Future related operations count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedOperations.id
  description: Recorded Future related operations ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedOperations.name
  description: Recorded Future related operations name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedOperations.type
  description: Recorded Future related operations type
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCompany.count
  description: Recorded Future related company count
  type: Number
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCompany.id
  description: Recorded Future related company ID
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCompany.name
  description: Recorded Future related company name
  type: String
- contextPath: RecordedFuture.CVE.relatedEntities.RelatedCompany.type
  description: Recorded Future related company type
  type: String
tests:
- Recorded Future Test Playbook
fromversion: 5.0.0