Risk Notable Investigate

Try in Splunk SOAR

Description

This playbook checks for the presence of the Risk Investigation workbook and updates tasks or leaves generic notes.

• Type: Investigation
• Product: Splunk SOAR
• Apps: None
• Last Updated: 2021-10-22
• Author: Kelby Shelton, Splunk
• ID: rn0edc96-ff2b-48b0-9f6f-03da3783fd63

Associated Detections

How To Implement

Set this playbook to run in Active mode on the Risk Notable label in Splunk SOAR.

Explore Playbook

Required field

Reference

• https://docs.splunk.com/Documentation/ESSOC/latest/user/Useplaybookpack

source | version: 1