Cluster Report Categorization - Cofense Triage v3

Cluster Report Categorization playbook is used to retrieve the reports of specific clusters and perform the categorization of reports.

Pack

CofenseTriage

Tasks

6

Inputs

• Tags — Specify the tags to retrieve the cluster.
• MatchPriority — Specify the priority to retrieve the cluster based on the priority of the rules that match the reports in the cluster.

Commands used

• cofense-cluster-list
• cofense-report-list