Proactive Threat Hunting - Quarantine File

This playbook will be executed from the “Proactive Threat Hunting” layout button with the objective of quarantining a file specified by the analyst. The following integration is supported: - Cortex XDR IR

Proactive Threat Hunting · 6 tasks · 0 inputs · 0 outputs

Commands used

xdr-file-quarantine

Flowchart

yes Start Start Print update to notes - Print Print update to notes Print Provide details for file quarantine Provide details for file ... Has file to quarantine? Has file to quarantine? Done Done Quarantine file - xdr-file-quarantine Quarantine file xdr-file-quarantine