Stories
Ready-made intelligent workflows that you can use in one click. Use these stories as a starting point for fully custom playbooks or inspiration for your use cases.
All stories1213
Monitor and patch Tanium machines via TinesTools: Tanium, Tines
Manage Okta apps using pages in TinesTools: Okta
Update groups assigned to a user in Microsoft Entra IDTools: Microsoft, Microsoft Azure
Extract SentinelOne alert evidence & upload to Drata controlsTools: Drata, SentinelOne
Manage Velociraptor artifact collection via SlackTools: LimaCharlie, Slack, Velociraptor
Rotate AWS IAM access keys and update Tines credentialsTools: AWS, Slack, Tines
Log events for auditing using Tines story monitoring
Fetch & block high-risk domains with DomainTools and NextDNSBy Tools: DomainTools, NextDNS
Check updated CVEs for exploitation using VulnCheck and GreyNoiseTools: GreyNoise, VulnCheck
Retrieve and respond to Azure guest accounts detected by WizTools: Microsoft, Microsoft Azure, Wiz
Respond to Okta alerts with Mattermost & JiraTools: Jira Software, Mattermost, OktaRemediate AWS IAM alerts detected with Wiz using Slack and JiraTools: AWS, Jira Software, Slack, Wiz
Disable new MFA devices in OktaTools: Okta
Receive and Remediate Security Hub CSPM S3 findings from Amazon Security LakeTools: AWS, AWS Security Hub CSPM, Jira Software
Manage Logz.io SIEM AlertsTools: Jira Software, Logz.io
