Common Playbooks (v2.8.9)
Frequently used playbooks pack.
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Categories
- Utilities
Playbooks (103)
- Account Enrichment - Generic v2.1
- Block Account - Generic
- Block Account - Generic v2
- Block Domain - Generic
- Block Domain - Generic v2
- Block Email - Generic
- Block Email - Generic v2
- Block File - Generic v2
- Block IP - Generic v2
- Block IP - Generic v3
- Block Indicators - Generic v2
- Block Indicators - Generic v3
- Block URL - Generic
- Block URL - Generic v2
- CVE Enrichment - Generic v2
- Calculate Severity - 3rd-party integrations
- Calculate Severity - Critical Assets v2
- Calculate Severity - Generic v2
- Calculate Severity - Indicators DBotScore
- Calculate Severity - Standard
- Calculate Severity By Highest DBotScore
- Cloud Compute Enrichment - Generic
- Cloud Credentials Rotation - Generic
- Cloud Enrichment - Generic
- Cloud IAM Enrichment - Generic
- Cloud Response - Generic
- Cloud User Investigation - Generic
- Command-Line Analysis
- Containment Plan
- Containment Plan - Block Indicators
- Containment Plan - Clear User Sessions
- Containment Plan - Disable Account
- Containment Plan - Isolate Device
- Containment Plan - Quarantine File
- Context Polling - DT
- Context Polling - Generic
- Convert file hash to corresponding hashes
- DBot Indicator Enrichment - Generic
- Dedup - Generic v2
- Dedup - Generic v3
- Dedup - Generic v4
- Detonate File - Generic
- Detonate URL - Generic
- Detonate URL - Generic v1.5
- Detonate and Analyze File - Generic
- Domain Enrichment - Generic v2
- Email Address Enrichment - Generic v2.1
- Email Headers Check - Generic
- Endpoint Enrichment - Generic v2.1
- Endpoint Investigation Plan
- Enrichment for Verdict
- Entity Enrichment - Generic v2
- Eradication Plan
- Eradication Plan - Delete File
- Eradication Plan - Reset Password
- Eradication Plan - Terminate Process
- Extract Indicators From File - Generic v2
- Field Polling - Generic
- File Enrichment - File reputation
- File Enrichment - Generic v2
- File Reputation
- GenericPolling
- Get Cloud Account Owner - Generic
- Get Email From Email Gateway - Generic
- Get File Sample By Hash - Generic v2
- Get File Sample By Hash - Generic v3
- Get File Sample From Path - Generic
- Get File Sample From Path - Generic V2
- Get File Sample From Path - Generic V3
- Get User Devices - Generic
- Get User Devices by Email Address - Generic
- Get User Devices by Username - Generic
- Get endpoint details - Generic
- Get host forensics - Generic
- Get prevalence for IOCs
- Handle False Positive Alerts
- IP Enrichment - External - Generic v2
- IP Enrichment - Generic v2
- IP Enrichment - Internal - Generic v2
- Indicator Registration Polling - Generic
- Isolate Endpoint - Generic
- Isolate Endpoint - Generic V2
- Recovery Plan
- Retrieve File from Endpoint - Generic
- Retrieve File from Endpoint - Generic V2
- Retrieve File from Endpoint - Generic V3
- SIEM - Search for Failed logins
- Search And Block Software - Generic
- Search And Delete Emails - Generic
- Search And Delete Emails - Generic v2
- Search Endpoint by CVE - Generic
- Search Endpoints By Hash - Generic V2
- Search For Hash In Sandbox - Generic
- Search and Compare Process Executions - Generic
- Send Investigation Summary Reports
- Send Investigation Summary Reports Job
- Threat Hunting - Generic
- Ticket Management - Generic
- URL Enrichment - Generic v2
- Unisolate Endpoint - Generic
- Unzip File
- User Investigation - Generic
- Wait Until Datetime