-
769 items
171 item
235 item
10 item
243 item
10 item
89 item
2 item
14 item - For developers
This playbook enables the SOC team to interact with suspicious or noteworthy files stored in Amazon S3 buckets. In threat investigation or compliance scenarios, alerts may reference specific files stored in S3 - whether they are logs, exfiltrated data, or suspicious payloads.
The playbook provides a controlled analyst decision point to download the file for analysis or ignore it. This ensures manual oversight for potentially risky or large-scale downloads while retaining automation for updating case records.
This playbook enables the SOC team to interact with suspicious or noteworthy files stored in Amazon S3 buckets. In threat investigation or compliance scenarios, alerts may reference specific files stored in S3 - whether they are logs, exfiltrated data, or suspicious payloads.
The playbook provides a controlled analyst decision point to download the file for analysis or ignore it. This ensures manual oversight for potentially risky or large-scale downloads while retaining automation for updating case records.
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox
