FilesExpand file tree

develop

/

response_tasks

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

response_tasks

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
all_backup_logs_for_host.yml		all_backup_logs_for_host.yml
amazon_eks_kubernetes_activity_by_src_ip.yml		amazon_eks_kubernetes_activity_by_src_ip.yml
analyze_malicious_file.yml		analyze_malicious_file.yml
aws_investigate_security_hub_alerts_by_dest.yml		aws_investigate_security_hub_alerts_by_dest.yml
aws_investigate_user_activities_by_accesskeyid.yml		aws_investigate_user_activities_by_accesskeyid.yml
aws_investigate_user_activities_by_arn.yml		aws_investigate_user_activities_by_arn.yml
aws_investigate_user_activities_by_source_user.yml		aws_investigate_user_activities_by_source_user.yml
aws_network_acl_details_from_id.yml		aws_network_acl_details_from_id.yml
aws_network_interface_details_via_resourceid.yml		aws_network_interface_details_via_resourceid.yml
aws_s3_bucket_details_via_bucketname.yml		aws_s3_bucket_details_via_bucketname.yml
dns_hijack_enrichment.yml		dns_hijack_enrichment.yml
domain_certificate_investigation.yml		domain_certificate_investigation.yml
excessive_account_lockouts_enrichment_and_response.yml		excessive_account_lockouts_enrichment_and_response.yml
gcp_kubernetes_activity_by_src_ip.yml		gcp_kubernetes_activity_by_src_ip.yml
get_all_aws_activity_from_city.yml		get_all_aws_activity_from_city.yml
get_all_aws_activity_from_country.yml		get_all_aws_activity_from_country.yml
get_all_aws_activity_from_ip_address.yml		get_all_aws_activity_from_ip_address.yml
get_all_aws_activity_from_region.yml		get_all_aws_activity_from_region.yml
get_authentication_logs_for_endpoint.yml		get_authentication_logs_for_endpoint.yml
get_backup_logs_for_endpoint.yml		get_backup_logs_for_endpoint.yml
get_certificate_logs_for_a_domain.yml		get_certificate_logs_for_a_domain.yml
get_dns_server_history_for_a_host.yml		get_dns_server_history_for_a_host.yml
get_dns_traffic_ratio.yml		get_dns_traffic_ratio.yml
get_ec2_instance_details_by_instanceid.yml		get_ec2_instance_details_by_instanceid.yml
get_ec2_launch_details.yml		get_ec2_launch_details.yml
get_email_info.yml		get_email_info.yml
get_emails_from_specific_sender.yml		get_emails_from_specific_sender.yml
get_first_occurrence_and_last_occurrence_of_a_mac_address.yml		get_first_occurrence_and_last_occurrence_of_a_mac_address.yml
get_history_of_email_sources.yml		get_history_of_email_sources.yml
get_logon_rights_modifications_for_endpoint.yml		get_logon_rights_modifications_for_endpoint.yml
get_logon_rights_modifications_for_user.yml		get_logon_rights_modifications_for_user.yml
get_notable_history.yml		get_notable_history.yml
get_notable_info.yml		get_notable_info.yml
get_outbound_emails_to_hidden_cobra_threat_actors.yml		get_outbound_emails_to_hidden_cobra_threat_actors.yml
get_parent_process_info.yml		get_parent_process_info.yml
get_process_file_activity.yml		get_process_file_activity.yml
get_process_info.yml		get_process_info.yml
get_process_information_for_port_activity.yml		get_process_information_for_port_activity.yml
get_process_registry_activity.yml		get_process_registry_activity.yml
get_process_responsible_for_the_dns_traffic.yml		get_process_responsible_for_the_dns_traffic.yml
get_registry_activities.yml		get_registry_activities.yml
get_risk_modifiers_for_endpoint.yml		get_risk_modifiers_for_endpoint.yml
get_risk_modifiers_for_user.yml		get_risk_modifiers_for_user.yml
get_sysmon_wmi_activity_for_host.yml		get_sysmon_wmi_activity_for_host.yml
get_update_logs_for_endpoint.yml		get_update_logs_for_endpoint.yml
get_user_information_from_identity_table.yml		get_user_information_from_identity_table.yml
get_vulnerability_logs_for_endpoint.yml		get_vulnerability_logs_for_endpoint.yml
get_web_session_information_via_session_id.yml		get_web_session_information_via_session_id.yml
investigate_aws_activities_via_region_name.yml		investigate_aws_activities_via_region_name.yml
investigate_aws_ecr_container_listing_activity.yml		investigate_aws_ecr_container_listing_activity.yml
investigate_aws_user_activities_by_user_field.yml		investigate_aws_user_activities_by_user_field.yml
investigate_cloud_compute_instance_activities.yml		investigate_cloud_compute_instance_activities.yml
investigate_failed_logins_for_multiple_destinations.yml		investigate_failed_logins_for_multiple_destinations.yml
investigate_network_traffic_from_src_ip.yml		investigate_network_traffic_from_src_ip.yml
investigate_okta_activity_by_app.yml		investigate_okta_activity_by_app.yml
investigate_okta_activity_by_ip_address.yml		investigate_okta_activity_by_ip_address.yml
investigate_pass_the_hash_attempts.yml		investigate_pass_the_hash_attempts.yml
investigate_pass_the_ticket_attempts.yml		investigate_pass_the_ticket_attempts.yml
investigate_previous_unseen_user.yml		investigate_previous_unseen_user.yml
investigate_successful_remote_desktop_authentications.yml		investigate_successful_remote_desktop_authentications.yml
investigate_suspicious_strings_in_http_header.yml		investigate_suspicious_strings_in_http_header.yml
investigate_user_activities_in_all_cloud_regions.yml		investigate_user_activities_in_all_cloud_regions.yml
investigate_user_activities_in_okta.yml		investigate_user_activities_in_okta.yml
investigate_user_activities_in_single_cloud_region.yml		investigate_user_activities_in_single_cloud_region.yml
investigate_web_activity_from_host.yml		investigate_web_activity_from_host.yml
investigate_web_activity_from_src_ip.yml		investigate_web_activity_from_src_ip.yml
investigate_web_posts_from_src.yml		investigate_web_posts_from_src.yml
malware_hunt_and_contain.yml		malware_hunt_and_contain.yml
process_chain_analysis.yml		process_chain_analysis.yml
quarantaine_infected_host.yml		quarantaine_infected_host.yml
suspicious_email_attachment_investigate_and_delete.yml		suspicious_email_attachment_investigate_and_delete.yml
View all files