TIM - Add Bad Hash Indicators To SIEM

This playbook recives indicators from its parent playbook and provides the indicators as inputs for the sub-playbooks that push the indicators to the SIEM.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • TIM - ArcSight Add Bad Hash Indicators
  • TIM - QRadar Add Bad Hash Indicators

Integrations

  • ArcSight ESM v2
  • QRadar

Scripts

This playbook does not use any scripts.

Commands

This playbook does not use any commands.

Playbook Inputs


NameDescriptionDefault ValueRequired
Indicator QueryIndicators matching the indicator query will be used as playbook inputOptional

Playbook Outputs


There are no outputs for this playbook.

Playbook Image


Playbook Image