This article discusses building a phishing playbook using Smart SOAR, highlighting the importance of wireframing workflows. The four stages of the playbook include triaging, enrichment, containment and recovery. The article further breaks down these stages and describes how different responses and methods of assessment contribute to risk scores and severity level determination. Finally, it emphasizes the importance of integrating collaboration and approval processes within the workflow, aiding decision-making and validation.
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even
