Stories
Ready-made intelligent workflows that you can use in one click. Use these stories as a starting point for fully custom playbooks or inspiration for your use cases.
All stories1213
Disable accounts in Google Workspace, GitHub, and OktaTools: GitHub, Google, Jira Software, Okta
Create GitHub Issues from Elastic SIEM alertsTools: Elastic, GitHub
Process and remediate GuardDuty detections received via AWS Security HubTools: Amazon GuardDuty, AWS, AWS Security Hub, Jira Software, URLScan.io
Search and delete spam in an Office 365 mailboxTools: Microsoft
Monitor action failures in Tines and notify via SlackTools: Slack, Tines
Add URLhaus URLS to Cisco Umbrella deny listTools: Abuse.ch, Cisco
Correlate & alert on failed login attempts in Okta via SlackTools: Okta, Slack
Use AI to create cases and act on CrowdStrike alertsTools: CrowdStrike, Okta, PagerDuty, Zscaler
Enrich & remediate suspicious logins reported in OktaTools: AbuseIPDB, Okta, Slack, VirusTotal
Perform threat hunting with SentinelOne Deep VisibilityTools: SentinelOne
Send a message to user in Microsoft TeamsTools: Microsoft, Microsoft Teams
Detect secrets and sensitive data shared in SlackTools: Slack
Kill an active process in CrowdStrikeTools: CrowdStrike
Disable accounts in Microsoft Entra IDTools: Jira Software, Microsoft Azure
Isolate a host protected by Elastic EndpointTools: Elastic