splunk-security_content/docs/_playbooks/risk_notable_mitigate.md

title, last_modified_at, toc, toc_label, tags

title	last_modified_at	toc	toc_label	tags
Risk Notable Mitigate	2021-10-22	true		Response Splunk SOAR Risk Notable

Try in Splunk SOAR{: .btn .btn--success}

Description

This playbook checks for the presence of the Risk Response workbook and updates tasks or leaves generic notes. The risk_notable_verdict playbooks recommends this playbook as a second phase of the investigation. Additionally, this playbook can be used in ad-hoc investigations or incorporated into custom workbooks.

• Type: Response
• Product: Splunk SOAR
• Apps:
• Last Updated: 2021-10-22
• Author: Kelby Shelton, Splunk
• ID: rn0edc96-ff2b-48b0-9f6f-63da3783fd63

Associated Detections

How To Implement

tbd

Playbooks

Required field

Reference

• https://docs.splunk.com/Documentation/ESSOC/latest/user/Useplaybookpack

source | version: 1