This playbook recives indicators from its parent playbook and provides the indicators as inputs for the sub-playbooks that push the indicators to the SIEM.
This playbook uses the following sub-playbooks, integrations, and scripts.
- TIM - ArcSight Add Bad Hash Indicators
- TIM - QRadar Add Bad Hash Indicators
- ArcSight ESM v2
This playbook does not use any scripts.
This playbook does not use any commands.
|Indicator Query||Indicators matching the indicator query will be used as playbook input||Optional|
There are no outputs for this playbook.