Skip to main content

IP Enrichment - Infoblox Cloud

This Playbook is part of the Infoblox Threat Defense with DDI Pack.#

Supported versions

Available on Cortex XSOAR (versions 6.5.0 and later) and Cortex XSIAM.

This playbook enriches IP addresses with the dossier, TIDE and asset data using Infoblox Threat Defense with DDI integration.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • InfobloxBloxOneThreatDefense

Scripts#

  • DeleteContext

Commands#

  • bloxone-td-dossier-lookup-get
  • findIndicators
  • ip

Playbook Inputs#


NameDescriptionDefault ValueRequired
ip_addressesThe optional comma-separated list of IP addresses to enrich.Optional

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


IP Enrichment - Infoblox Cloud