Ido Van Dijk

This playbook automates and speeds up response to excessive user account lockouts, which could indicate a credential-based attack.

This playbook automates incident response actions to identify, investigate, and remediate unauthorized hidden user account creation.

The Cortex XSOAR Prisma Cloud Virtual Machine (VM) Alert Prioritization content pack helps cloud security operations teams prioritize and manage these alerts.

Automatically redirect traffic away from malicious domains using DNS sinkholes

The Default playbook is the most commonly used playbook in the Cortex Marketplace. And for good reason. It is used by most of our XSOAR customers to configure their first automation use case. The Default playbook, by virtue of its name, provides the building blocks for automating core elements of an incident response workflow.