Cluster Report Categorization - Cofense Triage v3

Cluster Report Categorization playbook is used to retrieve the reports of specific clusters and perform the categorization of reports.

Cofense Triage · 6 tasks · 2 inputs · 0 outputs

Inputs

  • Tags — Specify the tags to retrieve the cluster.
  • MatchPriority — Specify the priority to retrieve the cluster based on the priority of the rules that match the reports in the cluster.

Commands used

cofense-cluster-list cofense-report-list

Flowchart

yes Start Start Get the Clusters based on tags and match priority - cofense-cluster-list Get the Clusters based on... cofense-cluster-list Get Reports of specific cluster - cofense-report-list Get Reports of specific c... cofense-report-list Done Done Is Cofense Triage v3 Integration enabled? Is Cofense Triage v3 Inte... Report Categorization - Cofense Triage v3 - Report Categorization - Cofense Triage v3 Report Categorization - C... Report Categorization - Cofen...