Hunt for bad IOCs Deprecated Hidden

Deprecated. Use the Search Endpoints By Hash playbook. Assume that malicious IOCs are in the right place in the context and start hunting using available tools.

Deprecated Content (Deprecated) · 5 tasks · 0 inputs · 0 outputs

Details

IDHunt for bad IOCs
From Version5.0.0
Tasks5

README

DEPRECATED. Use the Search Endpoints By Hash playbook instead. Assumes that malicious IOCs are in the right place in the context and starts hunting using available tools.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

This playbook does not use any scripts.

Commands

This playbook does not use any commands.

Playbook Inputs

There are no inputs for this playbook.

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

Hunt_for_bad_IOCs

Flowchart

Start Start 1 - Carbon black Protection Rapid IOC Hunting 1 Carbon black Protection Rapid... 2 - Carbon Black Rapid IOC Hunting 2 Carbon Black Rapid IOC Hunting 3 - CrowdStrike Rapid IOC Hunting 3 CrowdStrike Rapid IOC Hunting 4 - TIE - IOC Hunt 4 TIE - IOC Hunt

Source

playbook-Hunt_for_bad_IOCs.yml
Download History Raw 
id: Hunt for bad IOCs
version: -1
name: Hunt for bad IOCs
fromversion: 5.0.0
system: true
description: Deprecated. Use the Search Endpoints By Hash playbook. Assume that malicious IOCs are in the right place in the context and start hunting using available tools.
starttaskid: "0"
hidden: true
tasks:
  "0":
    id: "0"
    taskid: 9d563269-d6b7-4d77-83c8-8916860ed44b
    type: start
    task:
      id: 9d563269-d6b7-4d77-83c8-8916860ed44b
      version: -1
      description: ""
      name: ""
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "1"
      - "2"
      - "3"
      - "4"
    view: |-
      {
        "position": {
          "x": 695,
          "y": 50
        }
      }
  "1":
    id: "1"
    taskid: 4575847d-6979-4a86-8f77-ad7afcda5b01
    type: playbook
    task:
      id: 4575847d-6979-4a86-8f77-ad7afcda5b01
      version: -1
      description: ""
      name: ""
      playbookName: Carbon black Protection Rapid IOC Hunting
      type: playbook
      iscommand: false
      brand: ""
    view: |-
      {
        "position": {
          "x": 50,
          "y": 195
        }
      }
  "2":
    id: "2"
    taskid: ea507294-262f-4b30-879a-7a0d33944a0f
    type: playbook
    task:
      id: ea507294-262f-4b30-879a-7a0d33944a0f
      version: -1
      description: ""
      name: ""
      playbookName: Carbon Black Rapid IOC Hunting
      type: playbook
      iscommand: false
      brand: ""
    view: |-
      {
        "position": {
          "x": 480,
          "y": 195
        }
      }
  "3":
    id: "3"
    taskid: 69cac33b-55de-4223-84f4-dea5ccca44e9
    type: playbook
    task:
      id: 69cac33b-55de-4223-84f4-dea5ccca44e9
      version: -1
      description: ""
      name: ""
      playbookName: CrowdStrike Rapid IOC Hunting
      type: playbook
      iscommand: false
      brand: ""
    view: |-
      {
        "position": {
          "x": 910,
          "y": 195
        }
      }
  "4":
    id: "4"
    taskid: e977184e-8358-4c0e-88f5-9a0bb3b41bb6
    type: playbook
    task:
      id: e977184e-8358-4c0e-88f5-9a0bb3b41bb6
      version: -1
      name: ""
      playbookName: TIE - IOC Hunt
      type: playbook
      iscommand: false
      brand: ""
      description: ""
    view: |-
      {
        "position": {
          "x": 1340,
          "y": 195
        }
      }
view: |-
  {
    "linkLabelsPosition": {},
    "paper": {
      "dimensions": {
        "height": 240,
        "width": 1670,
        "x": 50,
        "y": 50
      }
    }
  }
inputs: []
tests:
- No test - no instance
deprecated: true