SafeBreach Insights Feed Playbook

This playbook triggers automated remediation for all SafeBreach generated indicators generated by insights. Then it reruns related insights and tags remaining indicators as not remediated ("NotRemediated" tag).

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • Block Indicators - Generic v2
  • SafeBreach Rerun Insights

Integrations

  • Builtin

Scripts

  • Sleep
  • Set

Commands

  • appendIndicatorField
  • safebreach-get-remediation-data

Playbook Inputs


NameDescriptionDefault ValueSourceRequired
Optional

Playbook Outputs


There are no outputs for this playbook.