The joint solution integrates advanced asset intelligence from Criminal IP into the Cortex XSOAR orchestration engine, en- abling automatic threat indicator enrichment and evaluation within playbook-driven workflows. Cortex XSOAR orches- trates API interactions with Criminal IP, triggering progressive scan actions, threat classification, and report generation without manual intervention. Prebuilt playbooks streamline detection, investigation, and reporting, allowing SOC teams to act faster with higher confidence through rapid, informed decision-making and proactive incident response.
The solution delivers automated, end-to-end threat intel- ligence for both IPs and domains. The IP analysis provides detailed risk scoring and granular classification by flagging masking, obfuscation and contextual tagging. Tiered scan- ning for domain intelligence enables SOC teams to tailor investigations by using a Quick Scan for initial analysis, a Lite Scan for detailed investigations, and a Full Scan, if needed.
