Gerenderde documentatie
Deze pagina rendert de Markdown en Mermaid van de module direct vanuit de publieke documentatiebron.
Overview#
The Machine domain provides a workflow automation system that chains multiple provider transforms together into reusable machines. It enables building complex data enrichment and investigation workflows by combining transforms from various providers into sequential pipelines with variable passing between steps.
Key Features#
- Sequential transform chaining with variable passing between steps
- Multiple provider integration for diverse data sources
- Transform registry for discovering available operations per provider
- Dynamic runtime provider selection and binding
- Result aggregation from multiple transform steps
- Error handling for individual step failures
- Initial entity input with JSON payload support
Use Cases#
- Enriching IP addresses by chaining threat intelligence and network scanning transforms
- Investigating cryptocurrency wallets through sequential blockchain and compliance checks
- Resolving domains to IPs and running cascaded threat analysis
- Building reusable investigation workflows from modular provider transforms
Integration#
The Machine domain integrates with Transform for data operations, Provider for registry access, Enrichment for data augmentation, Investigation for case context, and Workflow for automation orchestration.
Last Reviewed: 2026-02-05