Skip to content

muratozfidan/playbooks

BranchesTags
 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

269 Commits
.gitignore
.gitignore
 
 
README.md
README.md
 
 
advanced_playbook_tutorial.json
advanced_playbook_tutorial.json
 
 
advanced_playbook_tutorial.png
advanced_playbook_tutorial.png
 
 
advanced_playbook_tutorial.py
advanced_playbook_tutorial.py
 
 
alert_deescalation_for_test_machines.json
alert_deescalation_for_test_machines.json
 
 
alert_deescalation_for_test_machines.png
alert_deescalation_for_test_machines.png
 
 
alert_deescalation_for_test_machines.py
alert_deescalation_for_test_machines.py
 
 
alert_escalation_for_attacked_executives.json
alert_escalation_for_attacked_executives.json
 
 
alert_escalation_for_attacked_executives.png
alert_escalation_for_attacked_executives.png
 
 
alert_escalation_for_attacked_executives.py
alert_escalation_for_attacked_executives.py
 
 
botnet_report_monitor.json
botnet_report_monitor.json
 
 
botnet_report_monitor.png
botnet_report_monitor.png
 
 
botnet_report_monitor.py
botnet_report_monitor.py
 
 
c2_investigate_and_contain.json
c2_investigate_and_contain.json
 
 
c2_investigate_and_contain.png
c2_investigate_and_contain.png
 
 
c2_investigate_and_contain.py
c2_investigate_and_contain.py
 
 
compromised_email_containment.json
compromised_email_containment.json
 
 
compromised_email_containment.png
compromised_email_containment.png
 
 
compromised_email_containment.py
compromised_email_containment.py
 
 
customer_firewall_request_handle_artifact.json
customer_firewall_request_handle_artifact.json
 
 
customer_firewall_request_handle_artifact.png
customer_firewall_request_handle_artifact.png
 
 
customer_firewall_request_handle_artifact.py
customer_firewall_request_handle_artifact.py
 
 
customer_firewall_request_parse_csv.json
customer_firewall_request_parse_csv.json
 
 
customer_firewall_request_parse_csv.png
customer_firewall_request_parse_csv.png
 
 
customer_firewall_request_parse_csv.py
customer_firewall_request_parse_csv.py
 
 
dns_hijack_enrichment.json
dns_hijack_enrichment.json
 
 
dns_hijack_enrichment.png
dns_hijack_enrichment.png
 
 
dns_hijack_enrichment.py
dns_hijack_enrichment.py
 
 
ec2_instance_investigation_and_notification.json
ec2_instance_investigation_and_notification.json
 
 
ec2_instance_investigation_and_notification.png
ec2_instance_investigation_and_notification.png
 
 
ec2_instance_investigation_and_notification.py
ec2_instance_investigation_and_notification.py
 
 
ec2_instance_isolation.json
ec2_instance_isolation.json
 
 
ec2_instance_isolation.png
ec2_instance_isolation.png
 
 
ec2_instance_isolation.py
ec2_instance_isolation.py
 
 
email_notification_for_malware.json
email_notification_for_malware.json
 
 
email_notification_for_malware.png
email_notification_for_malware.png
 
 
email_notification_for_malware.py
email_notification_for_malware.py
 
 
excessive_account_lockouts_enrichment_and_response.json
excessive_account_lockouts_enrichment_and_response.json
 
 
excessive_account_lockouts_enrichment_and_response.png
excessive_account_lockouts_enrichment_and_response.png
 
 
excessive_account_lockouts_enrichment_and_response.py
excessive_account_lockouts_enrichment_and_response.py
 
 
extrahop_detect_data_exfiltration.json
extrahop_detect_data_exfiltration.json
 
 
extrahop_detect_data_exfiltration.png
extrahop_detect_data_exfiltration.png
 
 
extrahop_detect_data_exfiltration.py
extrahop_detect_data_exfiltration.py
 
 
extrahop_externally_accessible_databases.json
extrahop_externally_accessible_databases.json
 
 
extrahop_externally_accessible_databases.png
extrahop_externally_accessible_databases.png
 
 
extrahop_externally_accessible_databases.py
extrahop_externally_accessible_databases.py
 
 
extrahop_new_dns_servers.json
extrahop_new_dns_servers.json
 
 
extrahop_new_dns_servers.png
extrahop_new_dns_servers.png
 
 
extrahop_new_dns_servers.py
extrahop_new_dns_servers.py
 
 
hunting.json
hunting.json
 
 
hunting.png
hunting.png
 
 
hunting.py
hunting.py
 
 
investigate.json
investigate.json
 
 
investigate.png
investigate.png
 
 
investigate.py
investigate.py
 
 
ip_investigate_and_report.json
ip_investigate_and_report.json
 
 
ip_investigate_and_report.png
ip_investigate_and_report.png
 
 
ip_investigate_and_report.py
ip_investigate_and_report.py
 
 
lets_encrypt_domain_investigate.json
lets_encrypt_domain_investigate.json
 
 
lets_encrypt_domain_investigate.png
lets_encrypt_domain_investigate.png
 
 
lets_encrypt_domain_investigate.py
lets_encrypt_domain_investigate.py
 
 
lost_device_response.json
lost_device_response.json
 
 
lost_device_response.png
lost_device_response.png
 
 
lost_device_response.py
lost_device_response.py
 
 
macos_ard_enumeration.json
macos_ard_enumeration.json
 
 
macos_ard_enumeration.png
macos_ard_enumeration.png
 
 
macos_ard_enumeration.py
macos_ard_enumeration.py
 
 
macos_root_password_mitigate.json
macos_root_password_mitigate.json
 
 
macos_root_password_mitigate.png
macos_root_password_mitigate.png
 
 
macos_root_password_mitigate.py
macos_root_password_mitigate.py
 
 
malicious_blacklists.json
malicious_blacklists.json
 
 
malicious_blacklists.png
malicious_blacklists.png
 
 
malicious_blacklists.py
malicious_blacklists.py
 
 
malicious_insider_containment.json
malicious_insider_containment.json
 
 
malicious_insider_containment.png
malicious_insider_containment.png
 
 
malicious_insider_containment.py
malicious_insider_containment.py
 
 
malware_hunt_and_contain.json
malware_hunt_and_contain.json
 
 
malware_hunt_and_contain.png
malware_hunt_and_contain.png
 
 
malware_hunt_and_contain.py
malware_hunt_and_contain.py
 
 
mcafee_phishing_attachment_investigate.json
mcafee_phishing_attachment_investigate.json
 
 
mcafee_phishing_attachment_investigate.png
mcafee_phishing_attachment_investigate.png
 
 
mcafee_phishing_attachment_investigate.py
mcafee_phishing_attachment_investigate.py
 
 
nagios_service_monitor.json
nagios_service_monitor.json
 
 
nagios_service_monitor.png
nagios_service_monitor.png
 
 
nagios_service_monitor.py
nagios_service_monitor.py
 
 
onboarding_demonstration.json
onboarding_demonstration.json
 
 
onboarding_demonstration.png
onboarding_demonstration.png
 
 
onboarding_demonstration.py
onboarding_demonstration.py
 
 
phishing_investigate_and_respond.json
phishing_investigate_and_respond.json
 
 
phishing_investigate_and_respond.png
phishing_investigate_and_respond.png
 
 
phishing_investigate_and_respond.py
phishing_investigate_and_respond.py
 
 
phishme_email_investigate_and_respond.json
phishme_email_investigate_and_respond.json
 
 
phishme_email_investigate_and_respond.png
phishme_email_investigate_and_respond.png
 
 
phishme_email_investigate_and_respond.py
phishme_email_investigate_and_respond.py
 
 
pin_to_hud_sample.json
pin_to_hud_sample.json
 
 
pin_to_hud_sample.png
pin_to_hud_sample.png
 
 
pin_to_hud_sample.py
pin_to_hud_sample.py
 
 
protectwise_investigate_and_respond.json
protectwise_investigate_and_respond.json
 
 
protectwise_investigate_and_respond.png
protectwise_investigate_and_respond.png
 
 

Repository files navigation

Phantom Community Playbooks for Phantom version 4.5

This is the 4.5 branch of the Phantom Community Playbooks repository. For older versions of Phantom there are other branches such as 4.2 and 3.5

The Phantom platform automatically links to the branch of this repository that matches the running Phantom version. By default this repository is named community, which can be selected as the Repo filter to only display these Playbooks. You can update your content with the Update from source control button.

About

Phantom Orchestration Playbooks

Resources

Readme
Activity

Stars

1 star

Watchers

1 watching

Forks

1 fork
Report repository

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%