Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Disable indicators based on warninglists #50

Open
cudeso opened this issue Dec 8, 2023 · 0 comments
Open

Disable indicators based on warninglists #50

cudeso opened this issue Dec 8, 2023 · 0 comments
Assignees
@cudeso
Labels
needs triage This issue has been automatically labelled and needs further triage playbook:activity=6 Playbooks for activity 6 playbook:state=proposal A 'proposal' for a new playbook

Comments

@cudeso
Copy link
Collaborator

cudeso commented Dec 8, 2023

The title of the playbook

Disable indicators based on warninglists

Purpose of the playbook

Use a playbook to go through events and change the to_ids flag if there are matches with a warninglist.
Add a tagging or comment to changed attributes
Provide a summary at the end

External resources used by this playbook

No response

Target audience

CTI, CSIRT, SOC

Breefly list the execution steps or workflow

No response
@cudeso cudeso added playbook:state=proposal A 'proposal' for a new playbook needs triage This issue has been automatically labelled and needs further triage playbook:activity=6 Playbooks for activity 6 labels Dec 8, 2023
@cudeso cudeso self-assigned this Dec 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@cudeso cudeso

Labels
needs triage This issue has been automatically labelled and needs further triage playbook:activity=6 Playbooks for activity 6 playbook:state=proposal A 'proposal' for a new playbook
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@cudeso