Playbook: Malware Hunt and Contain

Description

This playbook investigates and remediates malware infections on the endpoint.

Type: Response Date: 2021-01-21 Author: Philip Royer, Splunk ID: fb3edc76-ff2b-43c0-5f6f-63da4483fd63

Apps

LDAP, ServiceNow, Carbon Black Response, VirusTotal

How To Implement

Be sure to update asset naming to reflect the asset names configured in your environment.

Explore Playbook

explore

Required fields

  • fileHash

Reference

source | version: 1