RiskIQAsset Basic Information Enrichment - RiskIQ Digital Footprint

This playbook receives indicators from its parent playbook and enriches the basic information and the detected CVEs for the "RiskIQAsset" type of indicators. This playbook needs to be used with caution as it might use up the integrations' API license when running for large amounts of indicators. Supported Integrations: - RiskIQ Digital Footprint - VulnDB - CVE Search - IBM X-Force

RiskIQ Digital Footprint · 11 tasks · 2 inputs · 0 outputs

Inputs

  • asset_name — Name of the asset.
  • asset_type — Type of the asset. Possible values: Domain, Host, IP Address, IP Block, ASN, Page, SSL Cert, Contact.

Commands used

df-get-asset setIndicator

Flowchart

yes yes yes Start Start Is RiskIQ Digital Footprint integration enabled? Is RiskIQ Digital Footpri... Get asset details - df-get-asset Get asset details df-get-asset Update indicator with basic information of the asset - setIndicator Update indicator with bas... setIndicator Done Done Clean "RiskIQDigitalFootprint" key from the context - DeleteContext Clean "RiskIQDigitalFootp... DeleteContext CVE Enrichment - Generic v2 - CVE Enrichment - Generic v2 CVE Enrichment - Generic v2 CVE Enrichment - Generic v2 Is there a CVE to enrich? Is there a CVE to enrich? Clean "CVE" key from the context - DeleteContext Clean "CVE" key from the ... DeleteContext Enrichment of detected CVE(s) Enrichment of detected CV... Is there an asset to enrich? Is there an asset to enrich?