⚠️ Censys

⚠️ Unpublished: This item is from a solution that is not yet published on Azure Marketplace or not installed in Content Hub.

Censys Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Solutions Index


Attribute Value
Publisher Censys Support
Support Tier Partner
Support Link https://docs.censys.com
Categories domains
Version 3.0.0
Author Censys - support@censys.com
First Published 2026-03-05
Last Updated 2026-03-05
Solution Folder Censys

Leverage playbooks to enrich alerts and incidents with Censys Internet data. Analyst can lookup known information about IPs, domains, certificate SHAs in Censys.

Contents

Data Connectors

This solution does not include data connectors.

This solution may contain other components such as analytics rules, workbooks, hunting queries, or playbooks.

Tables Used

This solution queries 19 table(s) from its content items:

Table Used By Content
CensysCertificateAlert_CL Playbooks (writes)
CensysCertificate_CL Playbooks (writes)
CensysHostAlert_CL Playbooks (writes)
CensysHost_CL Playbooks (writes)
CensysRescanHostAlert_CL Playbooks (writes)
CensysRescanHost_CL Playbooks (writes)
CensysRescanWebPropertyAlert_CL Playbooks (writes)
CensysRescanWebProperty_CL Playbooks (writes)
CensysWebPropertyAlert_CL Playbooks (writes)
CensysWebProperty_CL Playbooks (writes)
Censys_Certificate_IOC_CL Workbooks
Censys_Host_History_Data_CL Workbooks
Censys_Host_IOC_CL Workbooks
Censys_Host_Services_CL Workbooks
Censys_Web_Property_Endpoint_CL Workbooks
Censys_Web_Property_IOC_CL Workbooks
Censys_Web_Property_Threat_CL Workbooks
Censys_Web_Property_Vuln_CL Workbooks
Incident_Enrich_Data_CL Workbooks

Internal Tables

The following 3 table(s) are used internally by this solution's content items:

Table Used By Content
CensysRelatedInfrastructure_CL Playbooks (writes), Workbooks
SecurityAlert Playbooks, Workbooks
SecurityIncident Playbooks, Workbooks

Content Items

This solution includes 12 content item(s):

Content Type Count
Playbooks 11
Workbooks 1

Workbooks

Name Tables Used
Censys Censys_Certificate_IOC_CL
Censys_Host_History_Data_CL
Censys_Host_IOC_CL
Censys_Host_Services_CL
Censys_Web_Property_Endpoint_CL
Censys_Web_Property_IOC_CL
Censys_Web_Property_Threat_CL
Censys_Web_Property_Vuln_CL
Incident_Enrich_Data_CL
Internal use:
CensysRelatedInfrastructure_CL
SecurityAlert
SecurityIncident

Playbooks

Name Description Tables Used
Censys Ad-Hoc IOC Lookup This playbook will be triggered from the workbook. This will fetch associated IPs, Host(Domains) and... -
Censys Add Incident Comment This playbook is triggered via HTTP request and is designed to be used as a sub-playbook by other Ce... -
Censys Alert Enrichment This playbook is triggered by a Microsoft Sentinel Alert. It extracts IP addresses, domains, and cer... CensysCertificateAlert_CL (write)
CensysHostAlert_CL (write)
CensysWebPropertyAlert_CL (write)
Censys Alert Rescan This playbook is triggered manually via HTTP request from a workbook or automation. It accepts input... CensysRescanHostAlert_CL (write)
CensysRescanWebPropertyAlert_CL (write)
Internal use:
SecurityAlert (read)
SecurityIncident (read)
Censys Entity Enrichment - Certificate This playbook is triggered automatically when a FileHash entity is detected in a Microsoft Sentinel ... -
Censys Entity Enrichment - Host This playbook is triggered automatically when an IP entity is detected in a Microsoft Sentinel incid... -
Censys Entity Enrichment - Web Property This playbook is triggered automatically when a DNS entity (domain name) is detected in a Microsoft ... -
Censys Host History This playbook is triggered manually via HTTP request, typically invoked from a Microsoft Sentinel wo... -
Censys Incident Enrichment This playbook will be triggered when any automation rule is attached or manually invoked. This will ... CensysCertificate_CL (write)
CensysHost_CL (write)
CensysWebProperty_CL (write)
Censys Related Infrastructure This playbook retrieves related infrastructure details for Censys entities (hosts, certificates, or ... Internal use:
CensysRelatedInfrastructure_CL (write)
Censys Rescan This playbook will be triggered manually. This will fetch associated IPs from the incident and make ... CensysRescanHost_CL (write)
CensysRescanWebProperty_CL (write)
Internal use:
SecurityIncident (read)

Release Notes

Version Date Modified (DD-MM-YYYY) Change History
3.0.0 06-04-2026 Added Support for Related Infrastructure Playbook and Workbook
3.0.0 05-03-2026 Initial Solution for Censys with Playbooks and Workbook

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Solutions Index