Skip to main content

SafeBreach - Process Behavioral Insights Feed

This playbook processes all SafeBreach behavioral indicators. It creates an incident for each SafeBreach Insight, enriched with all the related indicators and additional SafeBreach contextual information.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

This playbook does not use any integrations.

Scripts#

  • Set
  • SearchIncidentsV2

Commands#

  • safebreach-get-insights
  • createNewIncident
  • associateIndicatorToIncident

Playbook Inputs#


NameDescriptionDefault ValueRequired
Indicator QueryIndicators matching the indicator query will be used as playbook inputsafebreachisbehavioral:TOptional

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


SafeBreach - Process Behavioral Insights Feed