This playbook blocks domains using Proofpoint Threat Response.
The playbook checks whether the Proofpoint Threat Response integration is enabled, whether the Domain input has been provided and if so, blocks the domain.
Proofpoint Threat Response
- Details
- Content
- Dependencies
- Version History
Use the Proofpoint Threat Response integration to orchestrate and automate incident response.
Playbooks
| Name | Description |
|---|---|
| Block Domain - Proofpoint Threat Response |
Integrations
| Name | Description |
|---|---|
| Proofpoint Threat Response (Beta) | Use the Proofpoint Threat Response integration to orchestrate and automate incident response. |
Modeling Rules
| Name | Description |
|---|---|
Proofpoint Threat Response Modeling Rule | |
Proofpoint Threat Response Modeling Rule |
Playbooks
| Name | Description |
|---|---|
| Block Domain - Proofpoint Threat Response | This playbook blocks domains using Proofpoint Threat Response. |
Integrations
| Name | Description |
|---|---|
| Proofpoint Threat Response (Beta) | Use the Proofpoint Threat Response integration to orchestrate and automate incident response. |
Proofpoint Threat Response Event Collector | Use the Proofpoint Threat Response integration to orchestrate and automate incident response. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
1.0.11 - R2507216 (March 3, 2022)
Integrations
Proofpoint Threat Response (Beta)
- Add
!proofpoint-tr-close-incidentcommand
1.0.10 - 2109558 (December 14, 2021)
Integrations
Proofpoint Threat Response (Beta)
- Updated the Docker image to: demisto/python3:3.9.8.24399.
1.0.9 - 2042391 (December 2, 2021)
Integrations
Proofpoint Threat Response (Beta)
- Documentation fixes
Playbooks
Block Domain - Proofpoint Threat Response
- Documentation fixes
1.0.8 - 7640590 (September 16, 2021)
Integrations
Proofpoint Threat Response (Beta)
- Updated the Docker image to: demisto/python3:3.9.7.24076.
Playbooks
New: Block Domain - Proofpoint Threat Response
- This playbook blocks domains using Proofpoint Threat Response.
The playbook checks whether the Proofpoint Threat Response integration is enabled, whether the Domain input has been provided and if so, blocks the domain. (Available from Cortex XSOAR 5.5.0).
1.0.6 - 414425 (August 22, 2021)
Integrations
Proofpoint Threat Response (Beta)
- Fixed an issue where the expand_events argument of the proofpoint-tr-get-incident did not affect the response.
- Enhanced the incident commands outputs.
1.0.5 - 397182 (July 13, 2021)
Integrations
Proofpoint Threat Response (Beta)
- Updated the Docker image to: demisto/python3:3.9.5.21272.
1.0.4 - 377478 (June 6, 2021)
Integrations
Proofpoint Threat Response (Beta)
- Added default value of 12 hours to the First fetch timestamp integration parameter.
1.0.3 - 354205 (May 12, 2021)
Integrations
Proofpoint Threat Response (Beta)
- Fixed an issue where duplicate incidents were created and incident were missing.
- Added the fetch_limit and fetch_delta parameters.
- Updated the first_fetch parameter to relative time.
1.0.2 - R264879 (November 9, 2020)
Integrations
Proofpoint Threat Response (Beta)
- Fixed an issue where the command proofpoint-tr-update-incident-comment was not implemented correctly.
1.0.1 - R124496 (September 23, 2020)
PUBLISHER
Cortex
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | September 23, 2020 | |
| Last Release | November 22, 2022 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
