Automation Rising 2020 SOAR Hackathon: Join the ultimate playbook building challenge! - Devpost

Filter submissions

Sponsor Prizes

Early Submission Prize

Submitter Type

Individual
Team
Organization

Which category are you entering your playbook into?

Security Playbook
Palo Alto Networks Product Integration Playbook
Business Use Case Playbook

If applicable, which sponsor product(s) did you integrate?

AWS Security Hub
Sixgill
RiskIQ
Google Chronicle

Threat Detection Automation in IT OT converged Networks — Threat Detection Automation in IT OT converged Networks

Automating and optimizing an existing threat detection process in an IT OT converged network

SlashNext Online Brand Protection Detect & Respond Playbook

Fully automates the online brand abuse inboxes to detects brand impersonators & malicious URLs using deep inspection & packages required for take down proof (IOCs, forensics, & screenshots)

SecureHealth — SecureHealth

Next Generation Security Management for the Next Generation of Everywhere Health Devices

AWS EC2 - Prisma and XDR — AWS EC2 - Prisma and XDR

Reduce non-compliance with Prisma, EC2 and XDR combination

1+1 = 3 Supercharging XSOAR with Ansible — 1+1 = 3 Supercharging XSOAR with Ansible

XSOAR is the perfect No Code platform for IT Operations...

Temp Account Management for External Parties — Temp Account Management for External Parties

Scheduled account creation and deletion on Active Directory using CSV files

AWS Security Hub | Starter Pack — AWS Security Hub | Starter Pack

Get up and running faster with this AWS Starter pack. Contains Classifiers and Mappers to get you going. Also contains example playbooks to run through your security incidents from GuardDuty

AWS EC2 Compromise Response — AWS EC2 Compromise Response

The purpose of this playbook is to define an automated response to Guard Duty alerts indicating malicious traffic either inbound or outbound to an AWS EC2 instance.

Chronicle threat hunting — Chronicle threat hunting

Can you detect malicious activities that took place a year ago? How fast?

Incident Response Pack — Incident Response Pack

This Incident Response Playbook can be used by the SOC teams, who need to extract and enrich domain information, perform reputation checks and take response actions based on the results

Sixgill stolen domain investigation — Sixgill stolen domain investigation

Attacker buys stolen domain names to fool 'domain age' based intelligence, can you still catch them?

Sixgill XSOAR Content Pack — Sixgill XSOAR Content Pack

This XSOAR playbook is configured to run as a time triggered job that periodically adds bad indicators from Sixgill Darkfeed to SIEM blocklist.

Cyber Squatting detection with XSOAR — Cyber Squatting detection with XSOAR

Can we detect cyber squatting and phishing domains to protect our employees and customers with help of XSOAR and freeware tools?

RiskIQ threat hunting — RiskIQ threat hunting

Whois and passive DNS can be really powerful

Windows Forensics Using Powershell Remoting — Windows Forensics Using Powershell Remoting

This pack enables you to grab critical forensic evidence from your windows hosts and all of this without having to install any agent and respond in realtime.

Tidy — Tidy

Tidy integration handle endpoints environment installation.

SASE Automation with Prisma Access — SASE Automation with Prisma Access

Enable Service Providers and Enterprise customers to provision, manage and secure their SASE customers.

Detecting brand abuse using CT logs and logo detection

This submission monitors newly issued certificates from CT logs for potential phishing campaigns hosted on external (but visually similar) domains using word matching and logo recognition.

Phishing investigation response using xsoar and Slashnext — Phishing investigation response using xsoar and Slashnext

https://www.youtube.com/watch?v=G0bQiATtEyM

K8s Policy as Code for CN-Series — K8s Policy as Code for CN-Series

A DevSecOps playbook that automates the synching of Kubernetes Network Policy with CN-Series Security Policy.

Insider threat data exfiltration response with XSOAR — Insider threat data exfiltration response with XSOAR

Identify data exfiltration activity from insider threats while speeding investigation and response by providing fast access to file events and metadata across physical and cloud environments.

SlashNext Automate IR Abuse Inbox Management — SlashNext Automate IR Abuse Inbox Management

Dramatically reduce the time and effort involved in researching suspicious URLs across digital sources with accurate, fully automated, and definitive URL analysis on demand.

Identity Threats Incident Response with XSOAR and Silverfort — Identity Threats Incident Response with XSOAR and Silverfort

Blocking Identity-Based Threats with Silverfort and Palo Alto Networks Cortex XSOAR

Ransomware Response Pack — Ransomware Response Pack

Efficiently and effectively analyze, prioritize, and remediate potential threats in operational technology (OT) environments, lowering the risk to business-critical facilities and processes.

1 – 24 of 53