IP Enrichment - Generic Deprecated Hidden

Deprecated. Enrich IP using one or more integrations. IP enrichment includes: * Resolve IP to Hostname (DNS) * Threat information * Separate internal and external addresses * IP reputation * For internal addresses, get host information

Deprecated Content (Deprecated) · 16 tasks · 3 inputs · 8 outputs

Inputs

  • IP — The IP address to enrich.
  • InternalRange — The internal range to check against the IP address. The default range is taken from the IPv4 protocol.
  • ResolveIP — Convert the IP address to a hostname using a DNS query (True/ False).

Outputs

  • IP — The IP objects
  • DBotScore — Indicator, Score, Type, Vendor
  • Endpoint — The Endpoint's object
  • Endpoint.Hostname — The hostname to enrich
  • Endpoint.OS — Endpoint OS
  • Endpoint.IP — List of endpoint IP addresses
  • Endpoint.MAC — List of endpoint MAC addresses
  • Endpoint.Domain — Endpoint domain name

Commands used

vt-private-get-ip-report

Flowchart

yes yes yes yes yes Start Start Is there an external IP address? Is there an external IP a... Check IP reputation - IPReputation Check IP reputation IPReputation Done Done Enrich internal IP addresses Enrich internal IP addresses Enrich external IP addresses Enrich external IP addresses Do we have IP Addresses? Do we have IP Addresses? Determine whether the IP address is internal or external - IsIPInRanges Determine whether the IP ... IsIPInRanges Endpoint Enrichment - Generic - Endpoint Enrichment - Generic Endpoint Enrichment - Gen... Endpoint Enrichment - Generic Is there an internal IP address? Is there an internal IP a... Enrich IP address Enrich IP address Resolve the IP address? Resolve the IP address? IP to Hostname (DNS) - IPToHost IP to Hostname (DNS) IPToHost Enrich with Virus Total Private API Enrich with Virus Total P... Is Virus Total Private API enabled? Is Virus Total Private AP... Get IP report form Virus Total Private API - vt-private-get-ip-report Get IP report form Virus ... vt-private-get-ip-report