Blog
Security Operations
Playbook of the Week

Security Operations

Playbook of the Week

Playbook of the week: Uncover Your RDP Secrets

Playbook of the week: Uncover Your RDP Secrets

Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft which provides a user with a graphical interface to connect to another computer over a network connection. The user employs RDP client software, while the other computer must run RDP server software. Furthermore, it provides remote display and input capabilities over network connections for Windows-based applications running on a server....

Playbook of the Week

Sep 21, 2023

Security Operations

Must-Read Articles

Product Features

News and Events

Partner Integrations

Playbook of the Week

Playbook of the Week: Cloud Token Theft Response

Playbook of the Week, Uncategorized

Playbook of the Week: Cloud Token Theft Response

Cloud computing's scalability, adaptability, and cost-efficiency have seen businesses increasingly utilize these services. Nevertheless, with the growth of cloud services come new security risks. Among these is...

Sep 14, 2023

By Ben Melamed

Playbook of the Week: Automating DLP Incident Feedback

Playbook of the Week

Playbook of the Week: Automating DLP Incident Feedback

In today's digital landscape, data loss prevention (DLP) solutions have become a critical component for keeping sensitive data secure in an organization. With an increasing amount of data being generated and sh...

Sep 07, 2023

By Tomer Haimof

Playbook of the Week

Playbook of the Week: Swallow Traffic to Malicious Domains with DNS Sinkhol...

When you hear about sinkholes, it’s not necessarily a good thing. However, in the cybersecurity realm, DNS sinkholing is a technique used to redirect DNS queries for malicious doma...

Aug 31, 2023

By Ido Van Dijk

Playbook Of The Week - Fending Off Living Off the Land Attacks

Playbook of the Week

Playbook Of The Week - Fending Off Living Off the Land Attacks

Living Off the Land (LOTL) attacks are used by attackers to evade detection by the system's own native utilities, scripting languages, or trusted applications, rather than resortin...

Aug 24, 2023

By Arik Day

Playbook Of The Week - New Features for Better Response to Phishing Campaigns

Playbook of the Week

Playbook Of The Week - New Features for Better Response to Phishing Campaig...

Phishing emails are one of the most frequent, easily executable, and harmful security attacks that organizations, regardless of size, face today. High-volume, persistent phishing a...

Aug 17, 2023

By Arik Day

Playbook of the Week: Using CVEs in Incident Investigation

Playbook of the Week

Playbook of the Week: Using CVEs in Incident Investigation

The Common Vulnerabilities and Exposures (CVE) repository is designed to provide a reference for a publicly known information security vulnerability. CVE identifiers, or CVEs, are...

Aug 03, 2023

By Dror Avrahami

Playbook of the week: Streamlining SOC Communications

Playbook of the Week

Playbook of the week: Streamlining SOC Communications

Getting confused while switching between the email client and incident response system.Copying and pasting the wrong incident into an email.

Jun 22, 2023

By Yarden Altmann

Playbook of the Week: Automating SecOps Ticketing

Playbook of the Week

Playbook of the Week: Automating SecOps Ticketing

If you work in SecOps, a good part of your day is likely spent managing incident cases, including the attendant tasks, in multiple systems such as ServiceNow, Jira, Zendesk, and more. Wouldn’t it be nice if you...

Jun 08, 2023

By Danil Vilenchik

Playbook of the Week: Suspicious SSO? Check It Out with XSOAR

Playbook of the Week

Playbook of the Week: Suspicious SSO? Check It Out with XSOAR

In today's increasingly complex digital landscape, user and entity behavior analytics (UEBA) has emerged as a crucial tool for organizations looking to enhance their cybersecurity...

May 25, 2023

By Omri Itzhak

Playbook of the Week: Using ChatGPT in Cortex XSOAR

Playbook of the Week

Playbook of the Week: Using ChatGPT in Cortex XSOAR

You might have used ChatGPT to help you write a script or generate an image. So now that you know Cortex XSOAR has a ChatGPT integration, are you wondering how you might apply it to your security operations to...

May 18, 2023

By Sameh Elhakim

Playbook of the Week: Automate Anything with the Default Playbook

Playbook of the Week

Playbook of the Week: Automate Anything with the Default Playbook

With Cortex XSOAR, the automation possibilities are only limited by your imagination (and API integrations). If you have explored our hundreds of out-of-the-box playbooks in the Co...

May 11, 2023

By Ido Van Dijk

Playbook of the week: Responding to RDP Brute Force Attacks

Playbook of the Week

Playbook of the week: Responding to RDP Brute Force Attacks

Remote Desktop Protocol (RDP) is a widely used technology that allows users to remotely access and control computers and servers over a network connection. It is commonly used by o...

May 04, 2023

By Arik Day

Playbook of the Week: Automating Password Resets with Chatbot

Playbook of the Week, Product Features

Playbook of the Week: Automating Password Resets with Chatbot

“Hi, I can’t seem to login, can someone please reset my password? I need to get on a call soon”. Does that sound familiar to you?

Apr 27, 2023

By Ido Van Dijk

Playbook of the Week: Automating Malicious File Detonation with Joe Security

Playbook of the Week

Playbook of the Week: Automating Malicious File Detonation with Joe Securit...

The role of a security analyst has evolved significantly over the years, as the nature of cybersecurity threats have become increasingly sophisticated and complex. Today's security...

Apr 20, 2023

By Arad Carmi

Playbook of the Week: Automated Rapid Response to 3CXDesktopApp Supply Chain Attack

Announcement, Must-Read Articles, Playbook of the Week

Playbook of the Week: Automated Rapid Response to 3CXDesktopApp Supply Chai...

A supply chain attack involving a software-based phone application called 3CXDesktopApp hit at the end of March.

Apr 06, 2023

By Jane Goh

Playbook of the Week: Automating the Prioritization of Prisma Cloud Virtual Machine Alerts

Playbook of the Week

Playbook of the Week: Automating the Prioritization of Prisma Cloud Virtual...

Understanding and visualizing your cloud risks can be difficult to do. And, even if you have overcome those issues, the more data you collect often means more alerts and more work...

Mar 30, 2023

By Tomer Haimof

Playbook of the Week: Automated Rapid Response to Microsoft Outlook for Windows Vulnerability

Must-Read Articles, News and Events, Playbook of the Week

Playbook of the Week: Automated Rapid Response to Microsoft Outlook for Win...

Automate Your Response to the Microsoft Outlook for Windows Vulnerability (CVE-2023-23397) On March 14th 2023, as part of Microsoft’s Patch Tuesday re...

Mar 21, 2023

By Ben Melamed

Playbook of the Week: Manage Secrets and Protect Sensitive Data

Playbook of the Week

Playbook of the Week: Manage Secrets and Protect Sensitive Data

Information security teams rely on a variety of products and tools to manage their daily work. Each product typically has its own login details, creating a significant challenge fo...

Mar 03, 2023

By Moishy Matyas

Playbook of the Week: Automating CI/CD Pull Requests in GitHub

Playbook of the Week

Playbook of the Week: Automating CI/CD Pull Requests in GitHub

Continuous integration and delivery (CI/CD) is the set of processes that helps DevOps teams build and deliver high-quality software quickly. Integrating security into CI/CD typical...

Feb 17, 2023

By Shelly Tzohar

Playbook of the Week: Cloud Cryptojacking Response

Playbook of the Week

Playbook of the Week: Cloud Cryptojacking Response

As the use of multi-cloud environments continues to rise, adversaries have increased their focus on targeting cloud infrastructure. Cloud environments are seen as an attractive target for attackers, who seek to...

Feb 10, 2023

By Ben Melamed

Load more blogs

Load more blogs