История

Lior Tamir 70a3bd1835 VirusTotal playbooks to gallery * Removed parameters for connections and changed display name * Update tags, title		2021-08-02 14:46:29 +03:00
..
alert-trigger	Adding Tags for Playbook Gallery	2021-06-16 16:12:28 +00:00
incident-trigger	VirusTotal playbooks to gallery	2021-08-02 14:46:29 +03:00
readme.md	VirusTotal playbooks to gallery	2021-08-02 14:46:29 +03:00

Get-VirusTotalIPReport

author: Nicholas DiCola

This playbook will take each IP entity and query VirusTotal for IP Address Report (https://developers.virustotal.com/v3.0/reference#ip-info). It will write the results to Log Analytics and add a comment to the incident.

Quick Deployment

Deploy with incident trigger (recommended)

After deployment, attach this playbook to an automation rule so it runs when the incident is created.

Deploy with alert trigger

After deployment, you can run this playbook manually on an alert or attach it to an analytics rule so it will rune when an alert is created.

Incident Trigger

Alert Trigger