
May 13, 2025
1.1.0
ThreatQ Versions >= 6.7.3
Infoblox Grid Action Bundle
Overview
The Infoblox Grid Action Bundle allows the management of entries in Response Policy Zone (RPZ) zones.
The bundle provides the following actions:
- Infoblox Grid Add to RPZ - creates records in an RPZ from ThreatQ indicators of compromise (IP, FQDN and CIDR Block).
- Infoblox Grid Add Batch To RPZ - adds a batch of indicators to a RPZ Zone.
- Infoblox Grid Remove from RPZ - deletes records from an RPZ that are no longer needed.
- Infoblox Grid Remove Batch From RPZ - deletes a batch of indicators from a RPZ Zone.
The actions enrich the following indicator types:
- CIDR Block
- FQDN
- IP Address
Note: This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.