Splunk SOAR Playbooks: Cisco Umbrella DNS Denylisting
The Cisco Umbrella DNS Denylisting playbook is an input playbook that accepts a domain or list of domains as an input and then allows you to block the given domain(s) in Cisco Umbrella.
Related Videos
An Inside Look at SURGe Minicon at .conf24
Splunk Education: A Taste of Hands on Labs - MLTK with Enterprise Security