Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
d3tect
security_content
Repository navigation
Code
Pull requests
Actions
Projects
Security and quality
Insights
More
items
Files
Expand file tree
develop
Breadcrumbs
security_content
/
playbooks
/
Copy path
Directory actions
More options
More options
Directory actions
More options
More options
Latest commit
History
History
History
develop
Breadcrumbs
security_content
/
playbooks
/
Copy path
Top
Folders and files
Name
Name
Last commit message
Last commit date
parent directory
..
custom_functions
custom_functions
activedirectory_reset_password.json
activedirectory_reset_password.json
activedirectory_reset_password.png
activedirectory_reset_password.png
activedirectory_reset_password.py
activedirectory_reset_password.py
activedirectory_reset_password.yml
activedirectory_reset_password.yml
aws_disable_user_accounts.json
aws_disable_user_accounts.json
aws_disable_user_accounts.png
aws_disable_user_accounts.png
aws_disable_user_accounts.py
aws_disable_user_accounts.py
aws_disable_user_accounts.yml
aws_disable_user_accounts.yml
aws_find_inactive_users.json
aws_find_inactive_users.json
aws_find_inactive_users.png
aws_find_inactive_users.png
aws_find_inactive_users.py
aws_find_inactive_users.py
aws_find_inactive_users.yml
aws_find_inactive_users.yml
block_indicators.json
block_indicators.json
block_indicators.png
block_indicators.png
block_indicators.py
block_indicators.py
block_indicators.yml
block_indicators.yml
crowdstrike_malware_triage.json
crowdstrike_malware_triage.json
crowdstrike_malware_triage.png
crowdstrike_malware_triage.png
crowdstrike_malware_triage.py
crowdstrike_malware_triage.py
crowdstrike_malware_triage.yml
crowdstrike_malware_triage.yml
delete_detected_files.json
delete_detected_files.json
delete_detected_files.png
delete_detected_files.png
delete_detected_files.py
delete_detected_files.py
delete_detected_files.yml
delete_detected_files.yml
email_notification_for_malware.json
email_notification_for_malware.json
email_notification_for_malware.png
email_notification_for_malware.png
email_notification_for_malware.py
email_notification_for_malware.py
email_notification_for_malware.yml
email_notification_for_malware.yml
internal_host_splunk_investigate_log4j.json
internal_host_splunk_investigate_log4j.json
internal_host_splunk_investigate_log4j.png
internal_host_splunk_investigate_log4j.png
internal_host_splunk_investigate_log4j.py
internal_host_splunk_investigate_log4j.py
internal_host_splunk_investigate_log4j.yml
internal_host_splunk_investigate_log4j.yml
internal_host_ssh_investigate.json
internal_host_ssh_investigate.json
internal_host_ssh_investigate.png
internal_host_ssh_investigate.png
internal_host_ssh_investigate.py
internal_host_ssh_investigate.py
internal_host_ssh_investigate.yml
internal_host_ssh_investigate.yml
internal_host_ssh_log4j_investigate.json
internal_host_ssh_log4j_investigate.json
internal_host_ssh_log4j_investigate.png
internal_host_ssh_log4j_investigate.png
internal_host_ssh_log4j_investigate.py
internal_host_ssh_log4j_investigate.py
internal_host_ssh_log4j_investigate.yml
internal_host_ssh_log4j_investigate.yml
internal_host_ssh_log4j_respond.json
internal_host_ssh_log4j_respond.json
internal_host_ssh_log4j_respond.png
internal_host_ssh_log4j_respond.png
internal_host_ssh_log4j_respond.py
internal_host_ssh_log4j_respond.py
internal_host_ssh_log4j_respond.yml
internal_host_ssh_log4j_respond.yml
internal_host_winrm_investigate.json
internal_host_winrm_investigate.json
internal_host_winrm_investigate.png
internal_host_winrm_investigate.png
internal_host_winrm_investigate.py
internal_host_winrm_investigate.py
internal_host_winrm_investigate.yml
internal_host_winrm_investigate.yml
internal_host_winrm_log4j_investigate.json
internal_host_winrm_log4j_investigate.json
internal_host_winrm_log4j_investigate.png
internal_host_winrm_log4j_investigate.png
internal_host_winrm_log4j_investigate.py
internal_host_winrm_log4j_investigate.py
internal_host_winrm_log4j_investigate.yml
internal_host_winrm_log4j_investigate.yml
internal_host_winrm_log4j_respond.json
internal_host_winrm_log4j_respond.json
internal_host_winrm_log4j_respond.png
internal_host_winrm_log4j_respond.png
internal_host_winrm_log4j_respond.py
internal_host_winrm_log4j_respond.py
internal_host_winrm_log4j_respond.yml
internal_host_winrm_log4j_respond.yml
log4j_investigate.json
log4j_investigate.json
log4j_investigate.png
log4j_investigate.png
log4j_investigate.py
log4j_investigate.py
log4j_investigate.yml
log4j_investigate.yml
log4j_respond.json
log4j_respond.json
log4j_respond.png
log4j_respond.png
log4j_respond.py
log4j_respond.py
log4j_respond.yml
log4j_respond.yml
malware_hunt_and_contain.json
malware_hunt_and_contain.json
malware_hunt_and_contain.png
malware_hunt_and_contain.png
malware_hunt_and_contain.py
malware_hunt_and_contain.py
malware_hunt_and_contain.yml
malware_hunt_and_contain.yml
ransomware_investigate_and_contain.json
ransomware_investigate_and_contain.json
ransomware_investigate_and_contain.png
ransomware_investigate_and_contain.png
ransomware_investigate_and_contain.py
ransomware_investigate_and_contain.py
ransomware_investigate_and_contain.yml
ransomware_investigate_and_contain.yml
risk_notable_block_indicators.json
risk_notable_block_indicators.json
risk_notable_block_indicators.png
risk_notable_block_indicators.png
risk_notable_block_indicators.py
risk_notable_block_indicators.py
risk_notable_block_indicators.yml
risk_notable_block_indicators.yml
risk_notable_enrich.json
risk_notable_enrich.json
risk_notable_enrich.png
risk_notable_enrich.png
risk_notable_enrich.py
risk_notable_enrich.py
risk_notable_enrich.yml
risk_notable_enrich.yml
risk_notable_import_data.json
risk_notable_import_data.json
risk_notable_import_data.png
risk_notable_import_data.png
risk_notable_import_data.py
risk_notable_import_data.py
risk_notable_import_data.yml
risk_notable_import_data.yml
risk_notable_investigate.json
risk_notable_investigate.json
risk_notable_investigate.png
risk_notable_investigate.png
risk_notable_investigate.py
risk_notable_investigate.py
risk_notable_investigate.yml
risk_notable_investigate.yml
risk_notable_merge_events.json
risk_notable_merge_events.json
risk_notable_merge_events.png
risk_notable_merge_events.png
risk_notable_merge_events.py
risk_notable_merge_events.py
risk_notable_merge_events.yml
risk_notable_merge_events.yml
risk_notable_mitigate.json
risk_notable_mitigate.json
risk_notable_mitigate.png
risk_notable_mitigate.png
risk_notable_mitigate.py
risk_notable_mitigate.py
risk_notable_mitigate.yml
risk_notable_mitigate.yml
risk_notable_preprocess.json
risk_notable_preprocess.json
risk_notable_preprocess.png
risk_notable_preprocess.png
risk_notable_preprocess.py
risk_notable_preprocess.py
View all files
You can’t perform that action at this time.