Recorded Future Leaked Credential Alert Handling

Template playbook showing suggested steps to triage leaked credential alerts. Classifier/Mapper are available to ingest Recorded Future Leaked Credential Alerts.

Recorded Future Intelligence · 10 tasks · 1 input · 0 outputs

Inputs

  • account —

Flowchart

YES YES Start Start Account Enrichment - Generic v2.1 - Account Enrichment - Generic v2.1 Account Enrichment - Gene... Account Enrichment - Generic ... Is the user account active? Is the user account active? Query SIEM for suspicious behavior, logins, and location Query SIEM for suspicious... Notify user Notify user Expire password Expire password Verify activity Verify activity Disable account Disable account Enable account Enable account Done Done