SSO Password Spray Playbook
Learn how to detect and prevent SSO password spray attacks with our comprehensive security playbook. Automate response and strengthen authentication security.
Security Operations
Playbook of the Week
Automating Response to Unauthorized User Privilege Escalations Using PowerS...
Automating response to unauthorized privilege escalation activity such as a user being added to local administrator group using a PowerShell command
Automating Response to Multi-Factor Authentication Threats
SEO Meta description
Cortex XSIAM automated playbook addressing user rejected numerous SSO MFA attempts
Automating Response to Unauthorized Email Forwarding Activity in Google Wor...
Automating response to “A mail forwarding rule was configured in Google Workspace” with Cortex XSIAM
Automate Response to Event Log Clearing Alerts with Cortex XSIAM
Automating response to potentially malicious event logs clearing activity with Cortex XSIAM
Handling Successful SSO Sign-ins from Tor
Automating response to successful Tor SSO sign-ins with Cortex XSIAM
An Automated Response to Malicious Pod Activity
Automated playbook for effectively tackling malicious activity within Kubernetes clusters.
Rapid Response for Fighting Ursa Phishing Campaign
Automated playbook to speed response to Russian threat actor, Fighting Ursa, APT phishing campaign offering diplomatic cars for sale.
Playbook of the Week: Automating Response to Living-Off-the-Land (LOTL) Att...
Defend against stealthy LOTL attacks leveraging common tools and LOLBins. Cortex XDR automates detection, investigation, and remediation of suspicious...
Playbook of the Week: Prisma Cloud Compute - Compliance Alert v2
Empower compliance alert management with Cortex XSOAR. Enriched data, dedicated layouts, and streamlined workflows ensure proactive risk mitigation.
Playbook of the Week: Streamlining Suspicious Data Upload Alert Investigati...
The Cortex XSOAR XDR large-upload playbook is designed to streamline the management of Cortex XDR analytics “large upload” alerts, speeding the investigation process and providing ...
Playbook of the Week: Automating Management of XDR Identity Analytics Alert...
Playbook that automates management of XDR identity analytics alerts for speedier response to identity threats.
Playbook of the Week: Using YARA to Automate Malware Identification and Cla...
Using YARA in Cortex XSOAR to automatically identify and classify malware.
Playbook of the Week: Prisma Cloud Compute - Audit Alert v3
The Cortex XSOAR's Prisma Cloud Compute - Audit Alert v3 playbook emerges as a reliable ally, ensuring runtime audit events are not just responded to but proactively managed.
Playbook of the Week: XSOAR Common Playbooks
Foundational playbooks for automating the most common SOC use cases
Introducing New XSOAR Capture the Flags!
Capture the Flag content packs for a fun, interactive introduction to Cortex XSOAR
Bootstrap Your Threat Intel Management Program With Free Feeds and IOC Enri...
Leveraging automation to manage and optimize value from your threat feed subscriptions, particularly free feeds and IOC enrichers.
Playbook of the Week: Streamlining the management of XDR Incidents
The Cortex XSOAR XDR Lite playbook streamlines the handling of XDR alerts, by automating the repetitive tasks associated with incident response.
Playbook of the Week: Unleash the Power of Identity Threat Intelligence wit...
The Cortex XSOAR Prisma Cloud Virtual Machine (VM) Alert Prioritization content pack helps cloud security operations teams prioritize and manage these alerts.
Playbook of the week: Uncover Your RDP Secrets
Detecting and analyzing potential threats in RDP connections.
Playbook of the Week: Cloud Token Theft Response
Leveraging automation to respond quickly to cloud token thefts
Subscribe to Security Operations Blogs!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.