Recorded Future Vulnerability

This playbook was developed as a template to handle the ingestion of Recorded Future Cyber Vulnerability playbook alerts.

Recorded Future Intelligence · 17 tasks · 0 inputs · 0 outputs

Details

IDRecorded Future Vulnerability
From Version6.5.0
Tasks17

README

This playbook was developed as a template to handle the ingestion of Recorded Future Cyber Vulnerability playbook alerts.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • RecordedFuturePlaybookAlerts
  • jira-v2
  • Recorded Future v2

Scripts

This playbook does not use any scripts.

Commands

  • recordedfuture-playbook-alerts-update
  • recordedfuture-intelligence
  • jira-create-issue
  • setIncident
  • closeInvestigation

Playbook Inputs

There are no inputs for this playbook.

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

Recorded Future Vulnerability

Commands used

closeInvestigation jira-create-issue recordedfuture-intelligence recordedfuture-playbook-alerts-update setIncident

Flowchart

yes yes High Moderate Start Start Create Jira Issue - jira-create-issue Create Jira Issue jira-create-issue Ticket Creation Ticket Creation Set Portal Status to In-Progress Set Portal Status to In-P... Set Status to In-Progress - recordedfuture-playbook-alerts-update Set Status to In-Progress recordedfuture-playbook-alert... Request a Vulnerability Scan Request a Vulnerability Scan Set Incident Severity to Medium - setIncident Set Incident Severity to ... setIncident Analyst Prompt Analyst Prompt Set Incident Severity to Low - setIncident Set Incident Severity to Low setIncident Set Incident Severity to High - setIncident Set Incident Severity to ... setIncident Analyst Review Analyst Review Analyst Answer Analyst Answer What is the Severity? What is the Severity? Close Incident - closeInvestigation Close Incident closeInvestigation Initiate Vuln Scan Initiate Vuln Scan Set Status to Dismissed - recordedfuture-playbook-alerts-update Set Status to Dismissed recordedfuture-playbook-alert... Enrich CVE as Note - recordedfuture-intelligence Enrich CVE as Note recordedfuture-intelligence

Source

playbook-Recorded_Future_Vulnerability.yml playbook-Recorded_Future_Vulnerability_Alert_Handling.yml playbook-Recorded_Future_Vulnerability_Alert_Handling_README.md
Download History Raw 
Template playbook showing suggested steps to triage new critical vulnerability alerts. Playbook include New and Critical CVEs. Classifier/Mapper are available to ingest Recorded Future New, Critical or Pre NVD Vulnerability Alerts.

## Dependencies
This playbook uses the following sub-playbooks, integrations, and scripts.

### Sub-playbooks
This playbook does not use any sub-playbooks.

### Integrations
* Recorded Future v2
* RecordedFuture

### Scripts
This playbook does not use any scripts.

### Commands
* recordedfuture-links
* recordedfuture-intelligence

## Playbook Inputs
---

| **Name** | **Description** | **Default Value** | **Required** |
| --- | --- | --- | --- |
| cve |  | incident.recordedfuturealertentities.name | Optional |

## Playbook Outputs
---
There are no outputs for this playbook.

## Playbook Image
---
![Recorded Future Vulnerability Alert Handling](../doc_files/vulnerability_alert_handling.png)