URL Enrichment - Infoblox Cloud

This playbook enriches URL with the dossier and TIDE data using Infoblox Threat Defense with DDI integration.

Infoblox Threat Defense with DDI · 10 tasks · 1 input · 0 outputs

Inputs

  • urls — The optional comma-separated list of URLs to enrich.

Commands used

bloxone-td-dossier-lookup-get findIndicators url

Flowchart

yes yes yes yes Start Start Is Infoblox Threat Defense with DDI integration enabled? Is Infoblox Threat Defens... Clear previous inputs - DeleteContext Clear previous inputs DeleteContext Fetch Indicators from Incident - findIndicators Fetch Indicators from Inc... findIndicators Get reputation for URL indicators - url Get reputation for URL in... url Done Done Check whether URLs are available in playbook input Check whether URLs are av... Check for indicators Check for indicators Check that URL indicators are present or not Check that URL indicators... Get dossier information for URL indicators - bloxone-td-dossier-lookup-get Get dossier information f... bloxone-td-dossier-lookup-get