-
786 items
88 item
245 item
251 item
171 item
10 item
2 item
14 item
10 item - For developers
This playbook enables the SOC team to interact with suspicious or noteworthy files stored in Amazon S3 buckets. In threat investigation or compliance scenarios, alerts may reference specific files stored in S3 - whether they are logs, exfiltrated data, or suspicious payloads.
The playbook provides a controlled analyst decision point to download the file for analysis or ignore it. This ensures manual oversight for potentially risky or large-scale downloads while retaining automation for updating case records.
Suggested for you are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.
This playbook enables the SOC team to interact with suspicious or noteworthy files stored in Amazon S3 buckets. In threat investigation or compliance scenarios, alerts may reference specific files stored in S3 - whether they are logs, exfiltrated data, or suspicious payloads.
The playbook provides a controlled analyst decision point to download the file for analysis or ignore it. This ensures manual oversight for potentially risky or large-scale downloads while retaining automation for updating case records.
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox
