mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Philip Royer
d49ff42b57
Add a single workbook and all of its phases and tasks to demonstrate our new format for workbooks in security content. Good examples with all the fields are the workbook "Endpoint Ransomware", the phase "Contain", and the task "Neutralize Propagation Vectors".
11 lines
319 B
YAML
11 lines
319 B
YAML
create_time: '2021-01-29T15:14:32.872144Z'
|
|
how_to_implement: ''
|
|
id: ff44a3f5-65c9-49d0-9420-e5dc113c7067
|
|
modified_time: '2021-02-23T15:58:54.697086Z'
|
|
name: Lessons Learned
|
|
tasks:
|
|
- id: 9ab223a4-a636-47ab-92f9-4f8ab192f615
|
|
name: Improve processes
|
|
- id: fbd141ab-1f5a-4bcc-8cb3-74d1019b9feb
|
|
name: Build crisis report
|