Incident Postprocessing - Group-IB Threat Intelligence & Attribution
This Playbook is part of the Group-IB Threat Intelligence Pack.#
Supported versions
Supported Cortex XSOAR versions: 6.0.0 and later.
Obtains additional information on the threat actor involved in the incident and associates related indicators to the incident.
Dependencies#
This playbook uses the following sub-playbooks, integrations, and scripts.
Sub-playbooks#
This playbook does not use any sub-playbooks.
Integrations#
- Group-IB Threat Intelligence
Scripts#
This playbook does not use any scripts.
Commands#
- gibtia-get-threat-actor-info
- gibtia-get-threat-info
- associateIndicatorsToIncident
Playbook Inputs#
There are no inputs for this playbook.
Playbook Outputs#
There are no outputs for this playbook.
Playbook Image#
