End-of-Life (EoL)

Customize the Dbot Reputation Score Logic

settings indicatortypes automation
Cortex XSOAR calculates the reputation score of an entity (IP, URL or hash file) by considering the score received by third-party integrations used (such as VirusTotal and X-Force). The Dbot score is determined by the data reputation scripts. Amending the following scripts changes the way Dbot handles the reputation.
  • DataIPReputation
  • DataHashReputation
  • DataURLReputation
You can customize the Dbot reputation score according to your own logic. For information about how Cortex XSOAR handles reputation scores, see Indicator Reputation.
  1. Go to the
    page and locate the script you want to edit.
  2. Click
    Copy Automation
    and modify an existing reputation script, such as
    In the following example, we redefine the values for each reputation:
    Ensure that the
    tag is selected.
  3. Click
  4. To add the script to the indicator, go to
    Indicator Types
  5. Select the indicator type that you want to add the script and click
  6. In the
    Reputation Script
    field, select the script you modified in step 2.
  7. Click

Recommended For You