Enrichment URL - Forcepoint

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index


This playbook checks if malicious URL is blocked or unblocked by SMC firewall.

Attribute Value
Type Playbook
Solution Standalone Content
Source View on GitHub

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 2
forcepointsmcapiconnector Managed 0 4
ForcepointSMC-Connector Custom 1 0
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Add_comment_to_incident_(V3) post /Incidents/Comment —
Entities_-_Get_URLs post /entities/url —

forcepointsmcapiconnector (Managed)

Action Method Endpoint Other
Get_URLs_from_URL_list get /@{encodeURIComponent(variables('SMC Api Version Number'))}/elements/url_list_application/@{encodeURIComponent(last(split(items('For_each_URL_list')?['href'],'/')))} —
Find_IP_or_URL_in_SMC get /@{encodeURIComponent(variables('SMC Api Version Number'))}/elements —
Get_URL_List get /@{encodeURIComponent(variables('SMC Api Version Number'))}/elements/url_list_application —
Login post /@{encodeURIComponent(variables('SMC Api Version Number'))}/login —

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Playbooks