Try in Splunk SOAR

Description

This playbook handles locating indicators marked for blocking and determining if any blocking playbooks exist. If there is a match to the appropriate tags in the playbook, a filter block routes the name of the playbook to launch to a code block.

  • Type: Response
  • Product: Splunk SOAR
  • Apps: None
  • Last Updated: 2021-10-22
  • Author: Kelby Shelton, Splunk
  • ID: rn0edc96-ff2b-48b0-9f6f-83da3783fd63

Associated Detections

How To Implement

None

Playbooks

Required field

Reference

source | version: 1