Azure-Sentinel/Playbooks/RecordedFuture_Dom_C2_DNS_Name
dicolanl 525d001024 Updating Deploy buttons and links part 1 2021-06-16 00:25:40 +00:00
..
RecordedFuture_Dom_C2_DNS_Name_ImportToSentinel.json Add files via upload 2020-11-26 12:38:37 +00:00
RecordedFuture_Dom_C2_DNS_Name_IndicatorProcessor.json Update RecordedFuture_Dom_C2_DNS_Name_IndicatorProcessor.json 2021-05-05 18:04:20 +01:00
readme.md Updating Deploy buttons and links part 1 2021-06-16 00:25:40 +00:00

readme.md

RecordedFuture - DOMAIN - C&C DNS Name

author: Adrian Porcescu, Recorded Future

These playbooks leverage the Recorded Future API to automate the ingestion of Recorded Future C&C DNS Name Domain RiskList, into the ThreatIntelligenceIndicator table, for detection (alert) actions in Microsoft Azure Sentinel. For additional information please visit Recorded Future.

Note: Due to internal Microsoft Logic Apps dependencies, please deploy first the ImportToSentinel playbook before the IndicatorProcessor one.

Links to deploy the RecordedFuture_Dom_C2_DNS_Name_IndicatorProcessor playbook template:

Deploy to Azure Deploy to Azure Gov

Links to deploy the RecordedFuture_Dom_C2_DNS_Name_ImportToSentinel playbook template:

Deploy to Azure Deploy to Azure Gov