Skip to main content

Malware Investigation - Manual

This Playbook is part of the Malware Core Pack.#

Deprecated

Use 'Malware Investigation & Response Incident handler' instead.

Deprecated. Please use the 'Malware Investigation & Response Incident handler (From the 'Malware Investigation And Response' Pack).


Master playbook for investigating suspected malware presence on an endpoint. Labels:

  • System: the hostname for the endpoint being investigated

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

This playbook does not use any integrations.

Scripts#

This playbook does not use any scripts.

Commands#

This playbook does not use any commands.

Playbook Inputs#


There are no inputs for this playbook.

Playbook Outputs#


There are no outputs for this playbook.