Azure-Sentinel/Playbooks/Get-IPReputation
Joe Stahl 5c52fd52f0
Fixed a VT Schema change.
- The ASN value did was causing an issue when processing the VT payload. Looks like the Schema may have changed.
- Updated and included the complete VT IP response schema
- Updated The incident comment that is made to reflect a change in the VT Schema
2020-11-11 12:07:41 -05:00
..
azuredeploy.json Fixed a VT Schema change. 2020-11-11 12:07:41 -05:00
readme.md Fixing Playbook Deploy URLs 2020-02-24 10:06:59 -05:00

readme.md

Get-IPReputation

author: Nicholas DiCola

This playbook will take each IP entity and query VirusTotal for Ip Address Report (https://developers.virustotal.com/reference#ip-address-report). You will need to register to thier community for an API key.