The "Pangea - URL Enrichment with Cache" workflow is designed for efficient threat intelligence enrichment. It receives a URL from a parent process, then checks a global cache for any saved reputations within the last 24 hours. If the URL reputation is not cached, it consults Pangea for a current assessment, creates a summary of the analysis data, and saves this information along with the original API response for future use. This streamlined process reduces unnecessary queries, saving time and resources for businesses seeking to safeguard their digital environments.
Optional Triggers
"This workflows is intended to be used as a function."
Use Cases
Function, Threat Intelligence Enrichment
Workflow Breakdown
Receives an URL as input.
Lookup global variables for cached responses in the past 24 hours.
Lookup global variables for cached responses in the past 24 hours.
When no reputation is found in cache, a summary of the analysis data is created and saved with the original api data.
Vendors
Utils, Torq, Pangea
Workflow Output
Returns full analysis data and a summary of the information.
Tips
Set \"Provide Raw Data Analysis\" to true or false to add or remove original vendor information to the output