Common Playbooks v2.8.9
Frequently used playbooks pack.
- Author:
- Cortex XSOAR
- Support:
- xsoar
AgentixCortex CloudCloud Runtime SecurityXSIAMEDR
Utilities
Playbooks (103)
- Account Enrichment - Generic v2.1
- Block Account - Generic Deprecated
- Block Account - Generic v2
- Block Domain - Generic Deprecated
- Block Domain - Generic v2
- Block Email - Generic Deprecated
- Block Email - Generic v2
- Block File - Generic v2
- Block IP - Generic v2 Deprecated
- Block IP - Generic v3
- Block Indicators - Generic v2 Deprecated
- Block Indicators - Generic v3
- Block URL - Generic Deprecated
- Block URL - Generic v2
- CVE Enrichment - Generic v2
- Calculate Severity - 3rd-party integrations
- Calculate Severity - Critical Assets v2
- Calculate Severity - Generic v2
- Calculate Severity - Indicators DBotScore
- Calculate Severity - Standard
- Calculate Severity By Highest DBotScore
- Cloud Compute Enrichment - Generic
- Cloud Credentials Rotation - Generic
- Cloud Enrichment - Generic
- Cloud IAM Enrichment - Generic
- Cloud Response - Generic
- Cloud User Investigation - Generic
- Command-Line Analysis
- Containment Plan
- Containment Plan - Block Indicators
- Containment Plan - Clear User Sessions
- Containment Plan - Disable Account
- Containment Plan - Isolate Device
- Containment Plan - Quarantine File
- Context Polling - DT
- Context Polling - Generic
- Convert file hash to corresponding hashes
- DBot Indicator Enrichment - Generic
- Dedup - Generic v2 Deprecated Hidden
- Dedup - Generic v3 Deprecated
- Dedup - Generic v4
- Detonate File - Generic
- Detonate URL - Generic Deprecated
- Detonate URL - Generic v1.5
- Detonate and Analyze File - Generic
- Domain Enrichment - Generic v2
- Email Address Enrichment - Generic v2.1
- Email Headers Check - Generic
- Endpoint Enrichment - Generic v2.1
- Endpoint Investigation Plan
- Enrichment for Verdict
- Entity Enrichment - Generic v2
- Eradication Plan
- Eradication Plan - Delete File
- Eradication Plan - Reset Password
- Eradication Plan - Terminate Process
- Extract Indicators From File - Generic v2
- Field Polling - Generic
- File Enrichment - File reputation
- File Enrichment - Generic v2
- File Reputation
- GenericPolling
- Get Cloud Account Owner - Generic
- Get Email From Email Gateway - Generic
- Get File Sample By Hash - Generic v2 Deprecated
- Get File Sample By Hash - Generic v3
- Get File Sample From Path - Generic Deprecated
- Get File Sample From Path - Generic V2 Deprecated
- Get File Sample From Path - Generic V3
- Get User Devices - Generic
- Get User Devices by Email Address - Generic
- Get User Devices by Username - Generic
- Get endpoint details - Generic Deprecated
- Get host forensics - Generic
- Get prevalence for IOCs
- Handle False Positive Alerts
- IP Enrichment - External - Generic v2
- IP Enrichment - Generic v2
- IP Enrichment - Internal - Generic v2
- Indicator Registration Polling - Generic
- Isolate Endpoint - Generic Deprecated
- Isolate Endpoint - Generic V2
- Recovery Plan
- Retrieve File from Endpoint - Generic Deprecated
- Retrieve File from Endpoint - Generic V2 Deprecated
- Retrieve File from Endpoint - Generic V3
- SIEM - Search for Failed logins
- Search And Block Software - Generic
- Search And Delete Emails - Generic Deprecated
- Search And Delete Emails - Generic v2
- Search Endpoint by CVE - Generic
- Search Endpoints By Hash - Generic V2
- Search For Hash In Sandbox - Generic
- Search and Compare Process Executions - Generic
- Send Investigation Summary Reports
- Send Investigation Summary Reports Job
- Threat Hunting - Generic
- Ticket Management - Generic
- URL Enrichment - Generic v2
- Unisolate Endpoint - Generic
- Unzip File
- User Investigation - Generic
- Wait Until Datetime