Lost / Stolen Device Playbook

Initial incident details should be the name of the reporting person, or ID of the SIEM alert/incident, and description of the lost device.

Labels:

  • User: the owner of the device

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

This playbook does not use any integrations.

Scripts#

This playbook does not use any scripts.

Commands#

This playbook does not use any commands.

Playbook Inputs#


There are no inputs for this playbook.

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


lost_stolen_device