Recorded Future Identity - Create Incident (sub) Deprecated

Deprecated. Use Recorded Future - Identity Exposure instead. This playbook was developed as a sub-playbook to generate incidents for each exposed identity found in the Recorded Future Identity - Lookup Identities (parent) playbook.

Recorded Future Identity · 6 tasks · 2 inputs · 0 outputs

Inputs

  • ExposedIdentity — The exposed identity found. \nEx. username or email from 'recordedfuture-identity-search' command
  • Domain — The domain found with the exposed identity.

Commands used

createNewIncident

Flowchart

yes Start Start Create Identity Incident - createNewIncident Create Identity Incident createNewIncident Search Incidents - SearchIncidentsSummary Search Incidents SearchIncidentsSummary Does an Incident Already Exist? Does an Incident Already ... Done Done Delete foundIncidents Context - DeleteContext Delete foundIncidents Con... DeleteContext