---
title: "Playbooks"
canonical: "https://docs.infoblox.com/space/DeploymentGuideNIOSforSplunkSOAR/1688371581/Playbooks"
format: markdown
---
As part of this integration we have designed the following playbooks:

1. Block Indicators
  - Automates blocking of malicious domains and IPs in Infoblox Response Policy Zones (RPZ).
  - Creates or updates RPZ rules to enforce blocking.
  - Ensures immediate containment during threat hunting or incident response.
2. Unblock Indicators
  - Automates removal of domains or IPs from Infoblox RPZ.
  - Cleans up previously blocked indicators after remediation or false positives.
3. IP Lookup
  - Enriches IP addresses with IPAM and network context from Infoblox.
  - Provides visibility into IP ownership, lease details, and related assets.
4. Host Lookup
  - Provides detailed host enrichment using Infoblox DNS and IPAM data.
  - Retrieves host records, associated IPs, DNS views, and attributes.
5. MAC Lease Lookup
  - Retrieves DHCP lease information from Infoblox based on MAC addresses.
6. Bring Asset Data Back to Infoblox
  - Automates creation of host records in Infoblox.