From ff1f7e66284896775de41df26de72eaecf8ea175 Mon Sep 17 00:00:00 2001 From: tccontre Date: Thu, 23 Mar 2023 11:51:01 +0100 Subject: [PATCH] urlscan_io_dynamic_analysis_playbook --- playbooks/UrlScan_IO_Dynamic_Analysis.yml | 26 +++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 playbooks/UrlScan_IO_Dynamic_Analysis.yml diff --git a/playbooks/UrlScan_IO_Dynamic_Analysis.yml b/playbooks/UrlScan_IO_Dynamic_Analysis.yml new file mode 100644 index 0000000000..ca2dcc8fa0 --- /dev/null +++ b/playbooks/UrlScan_IO_Dynamic_Analysis.yml @@ -0,0 +1,26 @@ +name: UrlScan IO Dynamic Analysis +id: a1173c28-7b33-4a56-9d7f-5dbbca595cb0 +version: 1 +date: '2023-03-23' +author: Teoderick Contreras, Splunk +type: Investigation +description: "Accepts a url link, IP, or domain to be detonated using urlscan.io API connector." +playbook: UrlScan_IO_Dynamic_Analysis +how_to_implement: This input playbook requires the urlscan.io API connector to be configured. + It is designed to work in conjunction with the Dynamic Attribute Lookup playbook or other playbooks in the same style. +references: [] +app_list: + - urlscan.io +tags: + platform_tags: + - reputation + - url + - domain + - sandbox + - ip + - urlscan.io + playbook_type: Input + vpe_type: Modern + playbook_fields: [] + product: + - Splunk SOAR \ No newline at end of file