Azure-Sentinel/Playbooks/RecordedFuture_IOC_Enrichment
Lior Tamir aad48299ca Update playbook trigger names 2022-02-22 17:02:56 +02:00
..
RecordedFuture_IOC_Enrichment.json Update playbook trigger names 2022-02-22 17:02:56 +02:00
readme.md Updating Deploy buttons and links part 1 2021-06-16 00:25:40 +00:00

readme.md

Recorded Future - IOC - Enrichment

author: Adrian Porcescu, Recorded Future

This playbook leverages the Recorded Future API to automatically enrich the IP, Domain, Url and Hash indicators, found in incidents, with the following Recorded Future context: Risk Score, Risk Rules and Link to Intelligence Card. The enrichment content will be posted as a comment in the Sentinel incident. For additional information please visit Recorded Future

Links to deploy the RecordedFuture_IOC_Enrichment playbook template:

Deploy to Azure Deploy to Azure Gov