Customize the Dbot Reputation Score Logic

settings indicatortypes automation
Cortex XSOAR calculates the reputation score of an entity (IP, URL or hash file) by considering the score received by third-party integrations used (such as VirusTotal and X-Force). The Dbot score is determined by the data reputation scripts. Amending the following scripts changes the way Dbot handles the reputation.
  • DataIPReputation
  • DataHashReputation
  • DataURLReputation
You can customize the Dbot reputation score according to your own logic. For information about how Cortex XSOAR handles reputation scores, see Indicator Reputation.
  1. Go to the
    Automation
    page and locate the script you want to edit.
  2. Click
    Copy Automation
    and modify an existing reputation script, such as
    DataURLReputation
    .
    In the following example, we redefine the values for each reputation:
    Ensure that the
    Reputation
    tag is selected.
  3. Click
    Save
    .
  4. To add the script to the indicator, go to
    Settings
    Indicator Types
    .
  5. Select the indicator type that you want to add the script and click
    Edit
    .
  6. In the
    Reputation Script
    field, select the script you modified in step 2.
  7. Click
    Save
    .

Recommended For You