Recorded Future IP Intelligence

IP Address Enrichment using Recorded Future Intelligence

Recorded Future Intelligence · 7 tasks · 1 input · 97 outputs

Inputs

  • IP — The IP address to enrich.

Outputs

  • DBotScore.Indicator — The indicator that was tested
  • DBotScore.Type — Indicator type
  • DBotScore.Vendor — Vendor used to calculate the score
  • DBotScore.Score — The actual score
  • IP.Address — IP address
  • IP.ASN — ASN
  • IP.Geo.Country — IP Geolocation Country
  • RecordedFuture.IP.criticality — Risk Criticality
  • RecordedFuture.IP.criticalityLabel — Risk Criticality Label
  • RecordedFuture.IP.riskString — Risk String
  • RecordedFuture.IP.riskSummary — Risk Summary
  • RecordedFuture.IP.rules — Risk Rules
  • RecordedFuture.IP.score — Risk Score
  • RecordedFuture.IP.firstSeen — Evidence First Seen
  • RecordedFuture.IP.lastSeen — Evidence Last Seen
  • RecordedFuture.IP.intelCard — Recorded Future Intelligence Card URL
  • RecordedFuture.IP.type — Entity Type
  • RecordedFuture.IP.name — Entity
  • RecordedFuture.IP.id — Recorded Future Entity ID
  • RecordedFuture.IP.location.asn — ASN number
  • RecordedFuture.IP.location.cidr.id — Recorded Future CIDR ID
  • RecordedFuture.IP.location.cidr.name — CIDR
  • RecordedFuture.IP.location.cidr.type — CIDR Type
  • RecordedFuture.IP.location.location.city — IP Geolocation City
  • RecordedFuture.IP.location.location.continent — IP Geolocation Continent
  • RecordedFuture.IP.location.location.country — IP Geolocation Country
  • RecordedFuture.IP.location.organization — IP Geolocation Organization
  • RecordedFuture.IP.metrics.type — Recorded Future Metrics Type
  • RecordedFuture.IP.metrics.value — Recorded Future Metrics Value
  • RecordedFuture.IP.threatLists.description — Recorded Future Threat List Description
  • RecordedFuture.IP.threatLists.id — Recorded Future Threat List ID
  • RecordedFuture.IP.threatLists.name — Recorded Future Threat List Name
  • RecordedFuture.IP.threatLists.type — Recorded Future Threat List Type
  • RecordedFuture.IP.relatedEntities.RelatedAttacker.count — Recorded Future Related Attacker Count
  • RecordedFuture.IP.relatedEntities.RelatedAttacker.id — Recorded Future Related Attacker ID
  • RecordedFuture.IP.relatedEntities.RelatedAttacker.name — Recorded Future Related Attacker Name
  • RecordedFuture.IP.relatedEntities.RelatedAttacker.type — Recorded Future Related Attacker Type
  • RecordedFuture.IP.relatedEntities.RelatedTarget.count — Recorded Future Related Target Count
  • RecordedFuture.IP.relatedEntities.RelatedTarget.id — Recorded Future Related Target ID
  • RecordedFuture.IP.relatedEntities.RelatedTarget.name — Recorded Future Related Target Name
  • RecordedFuture.IP.relatedEntities.RelatedTarget.type — Recorded Future Related Target Type
  • RecordedFuture.IP.relatedEntities.RelatedThreatActor.count — Recorded Future Related Threat Actor Count
  • RecordedFuture.IP.relatedEntities.RelatedThreatActor.id — Recorded Future Related Threat Actor ID
  • RecordedFuture.IP.relatedEntities.RelatedThreatActor.name — Recorded Future Related Threat Actor Name
  • RecordedFuture.IP.relatedEntities.RelatedThreatActor.type — Recorded Future Related Threat Actor Type
  • RecordedFuture.IP.relatedEntities.RelatedMalware.count — Recorded Future Related Malware Count
  • RecordedFuture.IP.relatedEntities.RelatedMalware.id — Recorded Future Related Malware ID
  • RecordedFuture.IP.relatedEntities.RelatedMalware.name — Recorded Future Related Malware Name
  • RecordedFuture.IP.relatedEntities.RelatedMalware.type — Recorded Future Related Malware Type
  • RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.count — Recorded Future Related Vulnerability Count
  • RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.id — Recorded Future Related Vulnerability ID
  • RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.name — Recorded Future Related Vulnerability Name
  • RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.type — Recorded Future Related Vulnerability Type
  • RecordedFuture.IP.relatedEntities.RelatedIpAddress.count — Recorded Future Related IP address Count
  • RecordedFuture.IP.relatedEntities.RelatedIpAddress.id — Recorded Future Related IP address ID
  • RecordedFuture.IP.relatedEntities.RelatedIpAddress.name — Recorded Future Related IP address Name
  • RecordedFuture.IP.relatedEntities.RelatedIpAddress.type — Recorded Future Related IP address Type
  • RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.count — Recorded Future Related Domain Name Count
  • RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.id — Recorded Future Related Domain Name ID
  • RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.name — Recorded Future Related Domain Name Name
  • RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.type — Recorded Future Related Domain Name Type
  • RecordedFuture.IP.relatedEntities.RelatedProduct.count — Recorded Future Related Product Count
  • RecordedFuture.IP.relatedEntities.RelatedProduct.id — Recorded Future Related Product ID
  • RecordedFuture.IP.relatedEntities.RelatedProduct.name — Recorded Future Related Product Name
  • RecordedFuture.IP.relatedEntities.RelatedProduct.type — Recorded Future Related Product Type
  • RecordedFuture.IP.relatedEntities.RelatedCountries.count — Recorded Future Related Countries Count
  • RecordedFuture.IP.relatedEntities.RelatedCountries.id — Recorded Future Related Countries ID
  • RecordedFuture.IP.relatedEntities.RelatedCountries.name — Recorded Future Related Countries Name
  • RecordedFuture.IP.relatedEntities.RelatedCountries.type — Recorded Future Related Countries Type
  • RecordedFuture.IP.relatedEntities.RelatedHash.count — Recorded Future Related Hash Count
  • RecordedFuture.IP.relatedEntities.RelatedHash.id — Recorded Future Related Hash ID
  • RecordedFuture.IP.relatedEntities.RelatedHash.name — Recorded Future Related Hash Name
  • RecordedFuture.IP.relatedEntities.RelatedHash.type — Recorded Future Related Hash Type
  • RecordedFuture.IP.relatedEntities.RelatedTechnology.count — Recorded Future Related Technology Count
  • RecordedFuture.IP.relatedEntities.RelatedTechnology.id — Recorded Future Related Technology ID
  • RecordedFuture.IP.relatedEntities.RelatedTechnology.name — Recorded Future Related Technology Name
  • RecordedFuture.IP.relatedEntities.RelatedTechnology.type — Recorded Future Related Technology Type
  • RecordedFuture.IP.relatedEntities.RelatedEmailAddress.count — Recorded Future Related Email Address Count
  • RecordedFuture.IP.relatedEntities.RelatedEmailAddress.id — Recorded Future Related Email Address ID
  • RecordedFuture.IP.relatedEntities.RelatedEmailAddress.name — Recorded Future Related Email Address Name
  • RecordedFuture.IP.relatedEntities.RelatedEmailAddress.type — Recorded Future Related Email Address Type
  • RecordedFuture.IP.relatedEntities.RelatedAttackVector.count — Recorded Future Related Attack Vector Count
  • RecordedFuture.IP.relatedEntities.RelatedAttackVector.id — Recorded Future Related Attack Vector ID
  • RecordedFuture.IP.relatedEntities.RelatedAttackVector.name — Recorded Future Related Attack Vector Name
  • RecordedFuture.IP.relatedEntities.RelatedAttackVector.type — Recorded Future Related Attack Vector Type
  • RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.count — Recorded Future Related Malware Category Count
  • RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.id — Recorded Future Related Malware Category ID
  • RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.name — Recorded Future Related Malware Category Name
  • RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.type — Recorded Future Related Malware Category Type
  • RecordedFuture.IP.relatedEntities.RelatedOperations.count — Recorded Future Related Operations Count
  • RecordedFuture.IP.relatedEntities.RelatedOperations.id — Recorded Future Related ID
  • RecordedFuture.IP.relatedEntities.RelatedOperations.name — Recorded Future Related Operations Name
  • RecordedFuture.IP.relatedEntities.RelatedOperations.type — Recorded Future Related Operations Type
  • RecordedFuture.IP.relatedEntities.RelatedCompany.count — Recorded Future Related Company Count
  • RecordedFuture.IP.relatedEntities.RelatedCompany.id — Recorded Future Related Company ID
  • RecordedFuture.IP.relatedEntities.RelatedCompany.name — Recorded Future Related Company Name
  • RecordedFuture.IP.relatedEntities.RelatedCompany.type — Recorded Future Related Company Type

Commands used

recordedfuture-intelligence setIndicator

Flowchart

yes yes Start Start Done Done Is there an IP address to enrich? Is there an IP address to... Enrich Using Recorded Future API Enrich Using Recorded Fut... Is Recorded Future API enabled? Is Recorded Future API en... Get IP intelligence from Recorded Future - recordedfuture-intelligence Get IP intelligence from ... recordedfuture-intelligence setIndicator - setIndicator setIndicator setIndicator