Skip to main content

SafeBreach - Process Behavioral Insights Feed

This Playbook is part of the SafeBreach Insights Pack.#

This playbook processes all SafeBreach behavioral indicators. It creates an incident for each SafeBreach Insight, enriched with all the related indicators and additional SafeBreach contextual information.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

This playbook does not use any integrations.

Scripts#

  • Set
  • SearchIncidentsV2

Commands#

  • safebreach-get-insights
  • createNewIncident
  • associateIndicatorToIncident

Playbook Inputs#


NameDescriptionDefault ValueRequired
Indicator QueryIndicators matching the indicator query will be used as playbook inputsafebreachisbehavioral:TOptional

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


SafeBreach - Process Behavioral Insights Feed