admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Branch was auto-updated.

Browse Source
This commit is contained in:
srv-rr-gh-researchbt
2023-05-19 13:40:51 -07:00
committed by GitHub
parent dc0cf587f1 704967792c
commit e4e9d8fa47
3 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
playbooks/Attribute_Lookup_Dispatch.yml
+2 -2
View File
@@ -1,11 +1,11 @@
name: Dispatch Attribute Lookup
name: Attribute Lookup Dispatch
id: fc0edc96-ff2b-68d0-9a4d-63da6783fd64
version: 1
date: '2023-03-06'
author: Lou Stella, Splunk
type: Investigation
description: "Detects available entities and routes them to attribute lookup playbooks. The output of the playbooks will create new artifacts for any technologies that returned information."
playbook: Dispatch_Attribute_Lookup
playbook: Attribute_Lookup_Dispatch
how_to_implement: This playbook looks for artifacts and then dispatches the community Attribute Lookup playbooks. This playbook takes the output of those playbooks and nicely formats them into new artifacts with their results.
references: []
app_list: []
playbooks/Identifier_Reputation_Analysis_Dispatch.yml
+3 -3
View File
@@ -1,11 +1,11 @@
name: Dispatch Identifier Reputation Analysis
name: Identifier Reputation Analysis Dispatch
id: fc0edc96-ff2b-48b0-9b4d-63da6783fd64
version: 1
date: '2023-01-11'
author: Kelby Shelton, Splunk
type: Investigation
description: "Detects available indicators and routes them to indicator reputation analysis playbooks. The output of the analysis will update any artifacts, tasks, and indicator tags. https://d3fend.mitre.org/technique/d3f:IdentifierReputationAnalysis/"
playbook: Dispatch_Identifier_Reputation_Analysis
description: "Detects available indicators and routes them to indicator reputation analysis playbooks. The output of the analysis will update any artifacts, tasks, and indicator tags."
playbook: Identifier_Reputation_Analysis Dispatch
how_to_implement: This playbook looks for artifacts and then dispatches the community Reputation playbooks. This playbook takes the output of those playbooks and nicely formats them into notes and tags indicators with their results.
references:
- https://d3fend.mitre.org/technique/d3f:IdentifierReputationAnalysis/
playbooks/Related_Tickets_Search_Dispatch.yml
+2 -2
View File
@@ -1,11 +1,11 @@
name: Dispatch Related Tickets Search
name: Related Tickets Search Dispatch
id: fc0edc96-ab1f-48b9-9b4d-63da61bafe74
version: 1
date: '2023-02-28'
author: Patrick Bareiss, Splunk
type: Investigation
description: "Detects available indicators and routes them to dispatch related ticket search playbooks. The output of the analysis will update any artifacts, tasks, and indicator tags."
playbook: Dispatch_Related_Tickets_Search
playbook: Related_Tickets_Search_Dispatch
how_to_implement: This playbook looks for artifacts and then dispatches the community Related Tickets playbooks. This playbook takes the output of those playbooks and nicely formats them into notes and tags indicators with their results.
references:
- https://d3fend.mitre.org/technique/d3f:IdentifierReputationAnalysis/