Accepts a list of domains and blocks them. Generates a global report and list of observables.
- Type: Response
- Product: Splunk SOAR
- Last Updated: 2023-07-14
- Author: Patrick Bareiss, Splunk
- ID: 7fd9a82f-517a-4d86-bf24-4d4158719dc1
How To Implement
This playbook looks for artifacts and then dispatches the community denylisting playbooks. This playbook takes the output of those playbooks and nicely formats them into notes and tags indicators with their results.
|D3-DNSDL||DNS Denylisting||Blocking DNS Network Traffic based on criteria such as IP address, domain name, or DNS query type.||Network Isolation|
source | version: 1