Infoblox Import Hosts Daily MalwareC2DGA

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

Leverages the Infoblox TIDE API to automatically import threat indicators into the ThreatIntelligenceIndicator table. This playbook imports newly detected MalwareC2DGA domains on a scheduled daily basis.

Attribute Value
Type Playbook
Solution Infoblox Cloud Data Connector
Source View on GitHub

Logic App Connectors

This playbook uses 1 Logic App connector / built-in action:

Connector / Action Type Connections Actions
http Built-in 0 6
Action parameters (URLs, paths, function IDs)

http (Built-in)

Action Method Endpoint Other
Send_Emails_to_Sentinel POST https://graph.microsoft.com/beta/security/tiIndicators —
Send_Hashes_to_Sentinel POST https://graph.microsoft.com/beta/security/tiIndicators —
Send_Hosts_to_Sentinel POST https://graph.microsoft.com/beta/security/tiIndicators —
Send_IPs_to_Sentinel POST https://graph.microsoft.com/beta/security/tiIndicators —
Send_URLs_to_Sentinel POST https://graph.microsoft.com/beta/security/tiIndicators —
Get_TIDE_Data GET https://csp.infoblox.com/tide/api/data/threats/host/daily —

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Playbooks · Back to Infoblox Cloud Data Connector