Skip to main content

Darkmon - Ransomware Mentions Watch

This Playbook is part of the Darkmon Pack.#

Supported versions

Available on Cortex XSOAR (versions 6.8.0 and later).

Every 6 hours, polls ransomware mentions for the customer organisation. New entries open a critical 'Darkmon Ransomware Mention' incident and notify the CISO via Generic Notify.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

  • Darkmon - Generic Notify

Integrations#

  • Darkmon

Scripts#

  • DarkmonCreateIncidents
  • DarkmonFilterUnseen

Commands#

  • dmontip-get-ransomware

Playbook Inputs#


There are no inputs for this playbook.

Playbook Outputs#


There are no outputs for this playbook.