2.0 KiB
2.0 KiB
RecordedFuture - IP - Actively Communicating C&C Server
author: Adrian Porcescu, Recorded Future
These playbooks leverage the Recorded Future API to automate the ingestion of Recorded Future Actively Communicating C&C Server IP RiskList, into the ThreatIntelligenceIndicator table, for detection (alert) actions in Microsoft Azure Sentinel. For additional information please visit Recorded Future.
Note: Due to internal Microsoft Logic Apps dependencies, please deploy first the ImportToSentinel playbook before the IndicatorProcessor one.
Links to deploy the RecordedFuture_IP_ActCommC2C_IndicatorProcessor playbook template:
_
Links to deploy the RecordedFuture_IP_ActCommC2C_ImportToSentinel playbook template: