https://github.com/phantomcyber/playbooks
Phantom Community Playbooks
https://github.com/phantomcyber/playbooks
Last synced: 5 months ago
JSON representation
Phantom Community Playbooks
- Host: GitHub
- URL: https://github.com/phantomcyber/playbooks
- Owner: phantomcyber
- License: apache-2.0
- Created: 2015-08-31T22:35:12.000Z (almost 11 years ago)
- Default Branch: 6.3
- Last Pushed: 2025-01-29T23:57:57.000Z (over 1 year ago)
- Last Synced: 2025-01-30T00:26:51.436Z (over 1 year ago)
- Language: Python
- Homepage:
- Size: 49.1 MB
- Stars: 483
- Watchers: 64
- Forks: 204
- Open Issues: 19
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-incident-response - Phantom Community Playbooks - Phantom Community Playbooks for Splunk but also customizable for other use. (IR Tools Collection / Playbooks)
- fucking-awesome-incident-response - Phantom Community Playbooks - Phantom Community Playbooks for Splunk but also customizable for other use. (IR Tools Collection / Playbooks)
- Awesome-SOAR - Playbooks Automation components by Phantom
README
# Community Playbooks
This is the 6.2 branch of the Splunk SOAR Community Playbooks repository, which contains the default initial playbooks and custom functions for each Splunk SOAR instance. Splunk SOAR was previously known as Phantom. If you are using an older version of Splunk SOAR (or Phantom) then your instance will synchronize with an older branch of this repository such as [5.4](https://github.com/phantomcyber/playbooks/tree/5.4) or [4.10](https://github.com/phantomcyber/playbooks/tree/4.10)
The Splunk SOAR platform automatically links to the branch of this repository that matches the running Splunk SOAR version. By default this repository is named **community**, which can be selected as the **Repo** filter to only display these playbooks and custom functions. You can update your content with the **Update from source control** button on the playbook listing page.