diff --git a/Playbooks/Enrich-SentinelIncident-GreyNoiseCommunity-IP/readme.md b/Playbooks/Enrich-SentinelIncident-GreyNoiseCommunity-IP/readme.md index 0e2efcd025..70b698f455 100644 --- a/Playbooks/Enrich-SentinelIncident-GreyNoiseCommunity-IP/readme.md +++ b/Playbooks/Enrich-SentinelIncident-GreyNoiseCommunity-IP/readme.md @@ -1,9 +1,9 @@ -# Enrich-SentinelIncident-GreyNoise-IP +# Enrich-SentinelIncident-GreyNoiseCommunity-IP author: Nathan Swift This playbook uses the GreyNoise Community API to automatically enrich incidents generated by Sentinel for IP addresses. Optionally to prevent rate limits you may want to obtain a valid GreyNoise API Key. To learn more about the service and request a trial key, see the [Setting up an Account](https://developer.greynoise.io/docs/setting-up-an-account). -For details around the APIs used see the [RIOT API documentation](https://developer.greynoise.io/reference/ip-lookup-1#riotip) and the [IP Context API documentation](https://developer.greynoise.io/reference/ip-lookup-1#noisecontextip-1). +For details around the API used see the [Community API documentation](https://developer.greynoise.io/reference/community-api#get_v3-community-ip). @@ -40,8 +40,8 @@ Be sure under Actions to choose Run playbook and choose the GreyNoise-IP-Enrichm Once completed press Apply button at bottom to add the Automation rule. -## Manually update Logic App with GreyNoise API Key +## (Optional) Manually update Logic App with GreyNoise API Key -Open the Logic App and Edit. Within the UI editor go to Parameters button towards top and add the key ass a default value as shown below. In addition open the CommunityIP action and add Key and the Parameter GreyNoiseKey. +To prevent rate limits you may want to obtain a valid GreyNoise API Key. Open the Logic App and Edit. Within the UI editor go to Parameters button towards top and add the key ass a default value as shown below. In addition open the CommunityIP action and add Key and the Parameter GreyNoiseKey. ![apikey](Images/apikey.png) \ No newline at end of file