Name		Name	Last commit message	Last commit date
Latest commit History 256 Commits
.gitignore		.gitignore
README.md		README.md
advanced_playbook_tutorial.json		advanced_playbook_tutorial.json
advanced_playbook_tutorial.png		advanced_playbook_tutorial.png
advanced_playbook_tutorial.py		advanced_playbook_tutorial.py
alert_deescalation_for_test_machines.json		alert_deescalation_for_test_machines.json
alert_deescalation_for_test_machines.png		alert_deescalation_for_test_machines.png
alert_deescalation_for_test_machines.py		alert_deescalation_for_test_machines.py
alert_escalation_for_attacked_executives.json		alert_escalation_for_attacked_executives.json
alert_escalation_for_attacked_executives.png		alert_escalation_for_attacked_executives.png
alert_escalation_for_attacked_executives.py		alert_escalation_for_attacked_executives.py
botnet_report_monitor.json		botnet_report_monitor.json
botnet_report_monitor.png		botnet_report_monitor.png
botnet_report_monitor.py		botnet_report_monitor.py
c2_investigate_and_contain.json		c2_investigate_and_contain.json
c2_investigate_and_contain.png		c2_investigate_and_contain.png
c2_investigate_and_contain.py		c2_investigate_and_contain.py
compromised_email_containment.json		compromised_email_containment.json
compromised_email_containment.png		compromised_email_containment.png
compromised_email_containment.py		compromised_email_containment.py
customer_firewall_request_handle_artifact.json		customer_firewall_request_handle_artifact.json
customer_firewall_request_handle_artifact.png		customer_firewall_request_handle_artifact.png
customer_firewall_request_handle_artifact.py		customer_firewall_request_handle_artifact.py
customer_firewall_request_parse_csv.json		customer_firewall_request_parse_csv.json
customer_firewall_request_parse_csv.png		customer_firewall_request_parse_csv.png
customer_firewall_request_parse_csv.py		customer_firewall_request_parse_csv.py
email_notification_for_malware.json		email_notification_for_malware.json
email_notification_for_malware.png		email_notification_for_malware.png
email_notification_for_malware.py		email_notification_for_malware.py
excessive_account_lockouts_enrichment_and_response.json		excessive_account_lockouts_enrichment_and_response.json
excessive_account_lockouts_enrichment_and_response.png		excessive_account_lockouts_enrichment_and_response.png
excessive_account_lockouts_enrichment_and_response.py		excessive_account_lockouts_enrichment_and_response.py
extrahop_detect_data_exfiltration.json		extrahop_detect_data_exfiltration.json
extrahop_detect_data_exfiltration.png		extrahop_detect_data_exfiltration.png
extrahop_detect_data_exfiltration.py		extrahop_detect_data_exfiltration.py
extrahop_externally_accessible_databases.json		extrahop_externally_accessible_databases.json
extrahop_externally_accessible_databases.png		extrahop_externally_accessible_databases.png
extrahop_externally_accessible_databases.py		extrahop_externally_accessible_databases.py
extrahop_new_dns_servers.json		extrahop_new_dns_servers.json
extrahop_new_dns_servers.png		extrahop_new_dns_servers.png
extrahop_new_dns_servers.py		extrahop_new_dns_servers.py
hunting.json		hunting.json
hunting.png		hunting.png
hunting.py		hunting.py
investigate.json		investigate.json
investigate.png		investigate.png
investigate.py		investigate.py
ip_investigate_and_report.json		ip_investigate_and_report.json
ip_investigate_and_report.png		ip_investigate_and_report.png
ip_investigate_and_report.py		ip_investigate_and_report.py
lost_device_response.json		lost_device_response.json
lost_device_response.png		lost_device_response.png
lost_device_response.py		lost_device_response.py
macos_ard_enumeration.json		macos_ard_enumeration.json
macos_ard_enumeration.png		macos_ard_enumeration.png
macos_ard_enumeration.py		macos_ard_enumeration.py
macos_root_password_mitigate.json		macos_root_password_mitigate.json
macos_root_password_mitigate.png		macos_root_password_mitigate.png
macos_root_password_mitigate.py		macos_root_password_mitigate.py
malicious_blacklists.json		malicious_blacklists.json
malicious_blacklists.png		malicious_blacklists.png
malicious_blacklists.py		malicious_blacklists.py
malicious_insider_containment.json		malicious_insider_containment.json
malicious_insider_containment.png		malicious_insider_containment.png
malicious_insider_containment.py		malicious_insider_containment.py
malware_hunt_and_contain.json		malware_hunt_and_contain.json
malware_hunt_and_contain.png		malware_hunt_and_contain.png
malware_hunt_and_contain.py		malware_hunt_and_contain.py
mcafee_phishing_attachment_investigate.json		mcafee_phishing_attachment_investigate.json
mcafee_phishing_attachment_investigate.png		mcafee_phishing_attachment_investigate.png
mcafee_phishing_attachment_investigate.py		mcafee_phishing_attachment_investigate.py
nagios_service_monitor.json		nagios_service_monitor.json
nagios_service_monitor.png		nagios_service_monitor.png
nagios_service_monitor.py		nagios_service_monitor.py
onboarding_demonstration.json		onboarding_demonstration.json
onboarding_demonstration.png		onboarding_demonstration.png
onboarding_demonstration.py		onboarding_demonstration.py
phishing_investigate_and_respond.json		phishing_investigate_and_respond.json
phishing_investigate_and_respond.png		phishing_investigate_and_respond.png
phishing_investigate_and_respond.py		phishing_investigate_and_respond.py
phishme_email_investigate_and_respond.json		phishme_email_investigate_and_respond.json
phishme_email_investigate_and_respond.png		phishme_email_investigate_and_respond.png
phishme_email_investigate_and_respond.py		phishme_email_investigate_and_respond.py
pin_to_hud_sample.json		pin_to_hud_sample.json
pin_to_hud_sample.png		pin_to_hud_sample.png
pin_to_hud_sample.py		pin_to_hud_sample.py
protectwise_investigate_and_respond.json		protectwise_investigate_and_respond.json
protectwise_investigate_and_respond.png		protectwise_investigate_and_respond.png
protectwise_investigate_and_respond.py		protectwise_investigate_and_respond.py
ransomware_investigate_and_contain.json		ransomware_investigate_and_contain.json
ransomware_investigate_and_contain.png		ransomware_investigate_and_contain.png
ransomware_investigate_and_contain.py		ransomware_investigate_and_contain.py
reinfected_endpoint_check.json		reinfected_endpoint_check.json
reinfected_endpoint_check.png		reinfected_endpoint_check.png
reinfected_endpoint_check.py		reinfected_endpoint_check.py
rogue_wireless_access_point_remediate.json		rogue_wireless_access_point_remediate.json
rogue_wireless_access_point_remediate.png		rogue_wireless_access_point_remediate.png
rogue_wireless_access_point_remediate.py		rogue_wireless_access_point_remediate.py
rootkit_investigate.json		rootkit_investigate.json
rootkit_investigate.png		rootkit_investigate.png

Repository files navigation

Phantom Community Playbooks for Phantom version 4.1

This is the 4.1 branch of the Phantom Community Playbooks repository. For older versions of Phantom there are other branches such as 4.0 and 3.5

The Phantom platform automatically links to the branch of this repository that matches the running Phantom version. By default this repository is named community, which can be selected as the Repo filter to only display these Playbooks. You can update your content with the Update from source control button.

isabella232/playbooks

Folders and files

Latest commit

History