splunk-security_content/docs/_pages/paybooks.md

title, layout, author_profile, permalink, classes, sidebar

title	layout	author_profile	permalink	classes	sidebar
Playbooks	collection	false	/playbooks/	wide	nav playbooks

Name	Detections	Type
AWS Disable User Accounts	None	Response
AWS Find Inactive Users	None	Investigation
Active Directory Reset password	None	Response
Block Indicators	None	Response
Crowdstrike Malware Triage	None	Response
Delete Detected Files	[Executable File Written in Administrative SMB Share]((/detection/executable_file_written_in_administrative_smb_share/)	Response
Email Notification for Malware	None	Response
Internal Host SSH Investigate	None	Investigation
Internal Host SSH Log4j Investigate	None	Investigation
Internal Host SSH Log4j Response	None	Response
Internal Host WinRM Investigate	None	Investigation
Internal Host WinRM Log4j Investigate	None	Investigation
Internal Host WinRM Response	None	Response
Log4j Investigate	[Curl Download and Bash Execution]((/detection/curl_download_and_bash_execution/)[Wget Download and Bash Execution]((/detection/wget_download_and_bash_execution/)[Linux Java Spawning Shell]((/detection/linux_java_spawning_shell/)[Windows Java Spawning Shell]((/detection/windows_java_spawning_shell/)[Java Class File download by Java User Agent]((/detection/java_class_file_download_by_java_user_agent/)[Outbound Network Connection from Java Using Default Ports]((/detection/outbound_network_connection_from_java_using_default_ports/)[Log4Shell JNDI Payload Injection Attempt]((/detection/log4shell_jndi_payload_injection_attempt/)[Log4Shell JNDI Payload Injection with Outbound Connection]((/detection/log4shell_jndi_payload_injection_with_outbound_connection/)[Detect Outbound LDAP Traffic]((/detection/detect_outbound_ldap_traffic/)	Investigation
Log4j Respond	[Curl Download and Bash Execution]((/detection/curl_download_and_bash_execution/)[Wget Download and Bash Execution]((/detection/wget_download_and_bash_execution/)[Linux Java Spawning Shell]((/detection/linux_java_spawning_shell/)[Windows Java Spawning Shell]((/detection/windows_java_spawning_shell/)[Java Class File download by Java User Agent]((/detection/java_class_file_download_by_java_user_agent/)[Outbound Network Connection from Java Using Default Ports]((/detection/outbound_network_connection_from_java_using_default_ports/)[Log4Shell JNDI Payload Injection Attempt]((/detection/log4shell_jndi_payload_injection_attempt/)[Log4Shell JNDI Payload Injection with Outbound Connection]((/detection/log4shell_jndi_payload_injection_with_outbound_connection/)[Detect Outbound LDAP Traffic]((/detection/detect_outbound_ldap_traffic/)	Response
Log4j Splunk Investigation	None	Investigation
Malware Hunt and Contain	None	Response
Ransomware Investigate and Contain	[Conti Common Exec parameter]((/detection/conti_common_exec_parameter/)	Response
Risk Notable Block Indicators	None	Response
Risk Notable Enrich	None	Investigation
Risk Notable Import Data	None	Investigation
Risk Notable Investigate	None	Investigation
Risk Notable Merge Events	None	Investigation
Risk Notable Mitigate	None	Response
Risk Notable Preprocess	None	Investigation
Risk Notable Protect Assets and Users	None	Response
Risk Notable Review Indicators	None	Response
Risk Notable Verdict	None	Response
Start Investigation	None	Investigation
Threat Intel Investigate	None	Investigation
TruSTAR Enrich Indicators	None	Investigation