Skip to main content

RiskIQ Digital Footprint

Download With Dependencies

RiskIQ Digital Footprint integration enables your security team to manage assets outside your firewall and provides you with the ability to add or update assets and analyze your digital footprint from the view of the global adversary.

RiskIQ Digital Footprint software provides an active, comprehensive inventory of all of your IPs, domains, and hosts. RiskIQ scans millions of web pages and IPs every day, collecting telemetric data to produce a map of the internet. Digital Footprint uncovers and inventories all digital assets appearing online that tie back to your organization and that you depend on for your digital presence. Digital Footprint enables your security team to manage assets outside your firewall, bring unknown assets under management, and survey your digital footprint from the view of the global adversary.

This RiskIQ Digital Footprint Pack includes following entities in order to provide the aforementioned functionalities.

Integration

RiskIQ Digital Footprint integration enables your security team to manage assets outside your firewall, by bringing its details, providing you to add or update assets and analyze your digital footprint from the view of the global adversary with the help of various commands that summarize the activities performed on your assets.

Playbooks

  • Enrich Incident With Asset Details - RiskIQ Digital Footprint
  • Update Or Remove Assets - RiskIQ Digital Footprint

Enrich Incident With Asset Details - RiskIQ Digital Footprint

This playbook helps perform the following functionalities:

  • Enriches the incident with asset details.
  • Enriches the asset with the incident URL on the RiskIQ Digital Footprint platform.
  • Sends an email containing the owner's information to the primary or secondary contact of the asset.
  • Provides the user with an opportunity to update or remove the asset.

Enrich Incident With Asset Details - RiskIQ Digital Footprint

Update Or Remove Assets - RiskIQ Digital Footprint

This playbook checks if the user wants to update or remove the asset using various user inputs and performs the respective actions.

Update Or Remove Assets - RiskIQ Digital Footprint

Layouts

RiskIQ Asset Management Incident New/Edit Form

RiskIQAssetManagement_Incident_New_or_Edit_Form_View

RiskIQ Asset Management Incident Summary

RiskIQAssetManagement_Incident_Summary_View

RiskIQ Asset Management Incident Quick View

RiskIQAssetManagement_Incident_Quick_View

As part of this pack, you will also get out-of-the-box RiskIQ Asset Management incident type, RiskIQAsset indicator type, incident & indicator fields, and incident layouts. All of these are easily customizable to suit the needs of your organization.

RiskIQ Digital Footprint software provides an active, comprehensive inventory of all of your IPs, domains, and hosts. RiskIQ scans millions of web pages and IPs every day, collecting telemetric data to produce a map of the internet. Digital Footprint uncovers and inventories all digital assets appearing online that tie back to your organization and that you depend on for your digital presence. Digital Footprint enables your security team to manage assets outside your firewall, bring unknown assets under management, and survey your digital footprint from the view of the global adversary.

This RiskIQ Digital Footprint Pack includes following entities in order to provide the aforementioned functionalities.

Integration

RiskIQ Digital Footprint integration enables your security team to manage assets outside your firewall, by bringing its details, providing you to add or update assets and analyze your digital footprint from the view of the global adversary with the help of various commands that summarize the activities performed on your assets.

Playbooks

  • Enrich Incident With Asset Details - RiskIQ Digital Footprint
  • Update Or Remove Assets - RiskIQ Digital Footprint

Enrich Incident With Asset Details - RiskIQ Digital Footprint

This playbook helps perform the following functionalities:

  • Enriches the incident with asset details.
  • Enriches the asset with the incident URL on the RiskIQ Digital Footprint platform.
  • Sends an email containing the owner's information to the primary or secondary contact of the asset.
  • Provides the user with an opportunity to update or remove the asset.

Enrich Incident With Asset Details - RiskIQ Digital Footprint

Update Or Remove Assets - RiskIQ Digital Footprint

This playbook checks if the user wants to update or remove the asset using various user inputs and performs the respective actions.

Update Or Remove Assets - RiskIQ Digital Footprint

Layouts

RiskIQ Asset Management Incident New/Edit Form

RiskIQAssetManagement_Incident_New_or_Edit_Form_View

RiskIQ Asset Management Incident Summary

RiskIQAssetManagement_Incident_Summary_View

RiskIQ Asset Management Incident Quick View

RiskIQAssetManagement_Incident_Quick_View

As part of this pack, you will also get out-of-the-box RiskIQ Asset Management incident type, RiskIQAsset indicator type, incident & indicator fields, and incident layouts. All of these are easily customizable to suit the needs of your organization.

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByCommunity
CreatedSeptember 29, 2020
Last ReleaseMay 5, 2024
WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.