mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Philip Royer
d49ff42b57
Add a single workbook and all of its phases and tasks to demonstrate our new format for workbooks in security content. Good examples with all the fields are the workbook "Endpoint Ransomware", the phase "Contain", and the task "Neutralize Propagation Vectors".
18 lines
431 B
YAML
18 lines
431 B
YAML
create_time: '2021-01-29T15:14:32.861146Z'
|
|
description: Re-check neutralized systems and repeat or improve processes to cover
|
|
important systems as quickly as possible.
|
|
how_to_implement: ''
|
|
id: 0a928288-1ac2-4fe3-bb42-c67b580af02e
|
|
is_note_required: true
|
|
modified_time: '2021-02-23T15:58:54.663820Z'
|
|
name: Monitor progress
|
|
order: 5
|
|
owner: null
|
|
phase: 24
|
|
role: null
|
|
sla: null
|
|
sla_type: minutes
|
|
suggestions:
|
|
actions:
|
|
- run query
|