URL Outbound Traffic Filtering Dispatch
Description
Accepts a list of URLs and blocks them. Generates a global report and list of observables.
- Type: Response
- Product: Splunk SOAR
- Apps:
- Last Updated: 2023-05-22
- Author: Patrick Bareiss, Splunk
- ID: 83bbe505-4636-4f60-a37b-86f1234d8567
- Use-cases:
- Phishing
- Endpoint
Associated Detections
How To Implement
This playbook looks for artifacts and then dispatches the community denylisting playbooks. This playbook takes the output of those playbooks and nicely formats them into notes and tags indicators with their results.
D3FEND
| ID | Technique | Definition | Category |
|---|---|---|---|
| D3-OTF | Outbound Traffic Filtering | Restricting network traffic originating from any location. | Network Isolation |
Explore Playbook
Required field
Reference
source | version: 1