Splunk SOAR Playbooks: Cisco Umbrella DNS Denylisting
The Cisco Umbrella DNS Denylisting playbook is an input playbook that accepts a domain or list of domains as an input and then allows you to block the given domain(s) in Cisco Umbrella.
Related Videos
Splunk Education: A Taste of Hands on Labs - MLTK with Enterprise Security
SIEM In Seconds
SIEM in Seconds - Splunk Enterprise Security Auto Refresh and Timeline of Notable Events