Skip to main content

LogPoint SIEM Playbook

This Playbook is part of the LogPoint SIEM Integration Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

LogPoint SIEM Playbook guides users on use cases like blocking IP and domain and disabling users using products like CheckPoint Firewall, Active Directory, and VirusTotal. The actions depicted in the playbook helps analysts create their playbooks based on actual requirements and products deployed. (Available from Cortex XSOAR 6.0.0).


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • Active Directory Query v2
  • VirusTotal
  • LogPoint SIEM Integration
  • CheckPointFirewall_v2


  • CalculateEntropy
  • Sleep


  • checkpoint-application-site-category-get
  • checkpoint-show-objects
  • checkpoint-access-rule-add
  • ad-get-user
  • ad-disable-account
  • ip
  • domain
  • checkpoint-packages-list
  • checkpoint-host-add
  • checkpoint-gateways-list
  • lp-add-incident-comment
  • checkpoint-application-site-category-add
  • checkpoint-login-and-get-session-id
  • lp-get-incident-data
  • checkpoint-application-site-add
  • checkpoint-install-policy
  • checkpoint-show-task
  • checkpoint-logout
  • lp-assign-incidents
  • checkpoint-publish

Playbook Inputs#

There are no inputs for this playbook.

Playbook Outputs#

There are no outputs for this playbook.

Playbook Image#

LogPoint SIEM Playbook