Skip to main content

Indicator Enrichment - Censys

This Playbook is part of the Censys Pack.#

Supported versions

Available on Cortex XSOAR (versions 6.10.0 and later) and Cortex XSIAM.

This playbook enriches the IP addresses, domains, and SHA256 file hashes indicators with Censys threat intelligence data.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • CensysV2

Scripts#

  • DeleteContext

Commands#

  • cen-search
  • domain
  • findIndicators
  • ip

Playbook Inputs#


NameDescriptionDefault ValueRequired
ip_addressesSpecify the IP address(es) to enrich.Optional
domainsSpecify the domain(s) to enrich.Optional
file_hashesSpecify the SHA256 file hash(es) to enrich.Optional

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


Indicator Enrichment - Censys