Try in Splunk SOAR


Moves the event status to open and then launches the Dynamic playbooks for Reputation Analysis, Attribute Lookup, and Related Tickets.

  • Type: Investigation
  • Product: Splunk SOAR
  • Apps:
  • Last Updated: 2023-03-06
  • Author: Kelby Shelton, Patrick Bareiss, Teoderick Contreras, Lou Stella Splunk
  • ID: fc0edc96-ff1b-65e0-9a4d-64da6783fd64

Associated Detections

How To Implement

This playbook relies on local versions of the Dynamic Identifier Reputation Analysis, Dynamic Attributed Lookup, and Dynamic Related Tickets Search playbooks, as well as compatible input playbooks for those.

Explore Playbook


Required field


source | version: 1