-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fixed version for 'Cortex XDR - Port Scan - Adjusted' #28929
Conversation
…ic v3' sub-playbook and updated the README file.
…Initiator_File_Name, Initiator_File_Path
This PR was automatically updated by a GitHub Action
To stop automatic version bumps, add the |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@TalNos Nice work! just a couple of small things
This PR was automatically updated by a GitHub Action
To stop automatic version bumps, add the |
…e 'Cortex XDR - Endpoint Investigation' su-playbook as part of task number 145
This PR was automatically updated by a GitHub Action
To stop automatic version bumps, add the |
…d' into Cortex_XDR_-_Port_Scan_-_Adjusted
…d' into Cortex_XDR_-_Port_Scan_-_Adjusted
…d' into Cortex_XDR_-_Port_Scan_-_Adjusted
* Fixed version for 'Cortex XDR - Port Scan - Adjusted' * Added RN, removed irrelevant inputs for the 'Block Indicators - Generic v3' sub-playbook and updated the README file. * removed the following inputs since they are not in use: DstHostname, Initiator_File_Name, Initiator_File_Path * Bump pack from version CortexXDR to 5.1.0. * added missing 'else' path for task number 143 * Bump pack from version CortexXDR to 5.1.0. * added missing configs for 'attackerExternalHost' input used within the 'Cortex XDR - Endpoint Investigation' su-playbook as part of task number 145 * Bump pack from version CortexXDR to 5.1.0. * Bump pack from version CortexXDR to 5.1.0. * Removed the 'port blocking' section. added two new task. --------- Co-authored-by: Content Bot <[email protected]>
Status
Related Issues
fixes: https://jira-hq.paloaltonetworks.local/browse/CIAC-7853
Description
Improve the 'Cortex XDR - Port Scan - Adjusted' playbook to include proper analysis, containment, investigation, and remediation steps.