Files

.circleci
.github
docs
- .circleci
- Response_Actions
  - RA_1001_practice.md
  - RA_1002_take_trainings.md
  - RA_1003_raise_personnel_awareness.md
  - RA_1004_make_personnel_report_suspicious_activity.md
  - RA_1005_set_up_relevant_data_collection.md
  - RA_1006_set_up_a_centralized_long-term_log_storage.md
  - RA_1007_develop_communication_map.md
  - RA_1008_make_sure_there_are_backups.md
  - RA_1009_get_network_architecture_map.md
  - RA_1010_get_access_control_matrix.md
  - RA_1011_develop_assets_knowledge_base.md
  - RA_1012_check_analysis_toolset.md
  - RA_1013_access_vulnerability_management_system_logs.md
  - RA_1014_connect_with_trusted_communities.md
  - RA_1101_access_external_network_flow_logs.md
  - RA_1102_access_internal_network_flow_logs.md
  - RA_1103_access_internal_http_logs.md
  - RA_1104_access_external_http_logs.md
  - RA_1105_access_internal_dns_logs.md
  - RA_1106_access_external_dns_logs.md
  - RA_1107_access_vpn_logs.md
  - RA_1108_access_dhcp_logs.md
  - RA_1109_access_internal_packet_capture_data.md
  - RA_1110_access_external_packet_capture_data.md
  - RA_1111_get_ability_to_block_external_ip_address.md
  - RA_1112_get_ability_to_block_internal_ip_address.md
  - RA_1113_get_ability_to_block_external_domain.md
  - RA_1114_get_ability_to_block_internal_domain.md
  - RA_1115_get_ability_to_block_external_url.md
  - RA_1116_get_ability_to_block_internal_url.md
  - RA_1117_get_ability_to_block_port_external_communication.md
  - RA_1118_get_ability_to_block_port_internal_communication.md
  - RA_1119_get_ability_to_block_user_external_communication.md
  - RA_1120_get_ability_to_block_user_internal_communication.md
  - RA_1121_get_ability_to_find_data_transferred_by_content_pattern.md
  - RA_1122_get_ability_to_block_data_transferring_by_content_pattern.md
  - RA_1123_get_ability_to_list_data_transferred.md
  - RA_1124_get_ability_to_collect_transferred_data.md
  - RA_1125_get_ability_to_identify_transferred_data.md
  - RA_1126_find_data_transferred_by_content_pattern.md
  - RA_1127_get_ability_to_analyse_user-agent.md
  - RA_1128_get_ability_to_list_firewall_rules.md
  - RA_1201_get_ability_to_list_users_opened_email_message.md
  - RA_1202_get_ability_to_list_email_message_receivers.md
  - RA_1203_get_ability_to_block_email_domain.md
  - RA_1204_get_ability_to_block_email_sender.md
  - RA_1205_get_ability_to_delete_email_message.md
  - RA_1206_get_ability_to_quarantine_email_message.md
  - RA_1207_get_ability_to_collect_email_message.md
  - RA_1208_get_ability_to_analyse_email_address.md
  - RA_1301_get_ability_to_list_files_created.md
  - RA_1302_get_ability_to_list_files_modified.md
  - RA_1303_get_ability_to_list_files_deleted.md
  - RA_1304_get_ability_to_list_files_downloaded.md
  - RA_1305_get_ability_to_list_files_with_tampered_timestamps.md
  - RA_1306_get_ability_to_find_file_by_path.md
  - RA_1307_get_ability_to_find_file_by_metadata.md
  - RA_1308_get_ability_to_find_file_by_hash.md
  - RA_1309_get_ability_to_find_file_by_format.md
  - RA_1310_get_ability_to_find_file_by_content_pattern.md
  - RA_1311_get_ability_to_collect_file.md
  - RA_1312_get_ability_to_quarantine_file_by_path.md
  - RA_1313_get_ability_to_quarantine_file_by_hash.md
  - RA_1314_get_ability_to_quarantine_file_by_format.md
  - RA_1315_get_ability_to_quarantine_file_by_content_pattern.md
  - RA_1316_get_ability_to_remove_file.md
  - RA_1317_get_ability_to_analyse_file_hash.md
  - RA_1318_get_ability_to_analyse_windows_pe.md
  - RA_1319_get_ability_to_analyse_macos_macho.md
  - RA_1320_get_ability_to_analyse_unix_elf.md
  - RA_1321_get_ability_to_analyse_ms_office_file.md
  - RA_1322_get_ability_to_analyse_pdf_file.md
  - RA_1323_get_ability_to_analyse_script.md
  - RA_1324_get_ability_to_analyse_jar.md
  - RA_1325_get_ability_to_analyse_filename.md
  - RA_1401_get_ability_to_list_processes_executed.md
  - RA_1402_get_ability_to_find_process_by_executable_path.md
  - RA_1403_get_ability_to_find_process_by_executable_metadata.md
  - RA_1404_get_ability_to_find_process_by_executable_hash.md
  - RA_1405_get_ability_to_find_process_by_executable_format.md
  - RA_1406_get_ability_to_find_process_by_executable_content_pattern.md
  - RA_1407_get_ability_to_block_process_by_executable_path.md
  - RA_1408_get_ability_to_block_process_by_executable_metadata.md
  - RA_1409_get_ability_to_block_process_by_executable_hash.md
  - RA_1410_get_ability_to_block_process_by_executable_format.md
  - RA_1411_get_ability_to_block_process_by_executable_content_pattern.md
  - RA_1501_manage_remote_computer_management_system_policies.md
  - RA_1502_get_ability_to_list_registry_keys_modified.md
  - RA_1503_get_ability_to_list_registry_keys_deleted.md
  - RA_1504_get_ability_to_list_registry_keys_accessed.md
  - RA_1505_get_ability_to_list_registry_keys_created.md
  - RA_1506_get_ability_to_list_services_created.md
  - RA_1507_get_ability_to_list_services_modified.md
  - RA_1508_get_ability_to_list_services_deleted.md
  - RA_1509_get_ability_to_remove_registry_key.md
  - RA_1510_get_ability_to_remove_service.md
  - RA_1511_get_ability_to_analyse_registry_key.md
  - RA_1601_manage_identity_management_system.md
  - RA_1602_get_ability_to_lock_user_account.md
  - RA_1603_get_ability_to_list_users_authenticated.md
  - RA_1604_get_ability_to_revoke_authentication_credentials.md
  - RA_1605_get_ability_to_remove_user_account.md
  - RA_1606_get_ability_to_list_user_accounts.md
  - RA_2001_list_victims_of_security_alert.md
  - RA_2002_list_host_vulnerabilities.md
  - RA_2003_put_compromised_accounts_on_monitoring.md
  - RA_2101_list_hosts_communicated_with_internal_domain.md
  - RA_2102_list_hosts_communicated_with_internal_ip.md
  - RA_2103_list_hosts_communicated_with_internal_url.md
  - RA_2104_analyse_domain_name.md
  - RA_2105_analyse_ip.md
  - RA_2106_analyse_uri.md
  - RA_2107_list_hosts_communicated_by_port.md
  - RA_2108_list_hosts_connected_to_vpn.md
  - RA_2109_list_hosts_connected_to_intranet.md
  - RA_2110_list_data_transferred.md
  - RA_2111_collect_transferred_data.md
  - RA_2112_identify_transferred_data.md
  - RA_2113_list_hosts_communicated_with_external_domain.md
  - RA_2114_list_hosts_communicated_with_external_ip.md
  - RA_2115_list_hosts_communicated_with_external_url.md
  - RA_2116_find_data_transferred_by_content_pattern.md
  - RA_2117_analyse_user-agent.md
  - RA_2118_list_firewall_rules.md
  - RA_2201_list_users_opened_email_message.md
  - RA_2202_collect_email_message.md
  - RA_2203_list_email_message_receivers.md
  - RA_2204_make_sure_email_message_is_phishing.md
  - RA_2205_extract_observables_from_email_message.md
  - RA_2206_analyse_email_address.md
  - RA_2301_list_files_created.md
  - RA_2302_list_files_modified.md
  - RA_2303_list_files_deleted.md
  - RA_2304_list_files_downloaded.md
  - RA_2305_list_files_with_tampered_timestamps.md
  - RA_2306_find_file_by_path.md
  - RA_2307_find_file_by_metadata.md
  - RA_2308_find_file_by_hash.md
  - RA_2309_find_file_by_format.md
  - RA_2310_find_file_by_content_pattern.md
  - RA_2311_collect_file.md
  - RA_2312_analyse_file_hash.md
  - RA_2313_analyse_windows_pe.md
  - RA_2314_analyse_macos_macho.md
  - RA_2315_analyse_unix_elf.md
  - RA_2316_analyse_ms_office_file.md
  - RA_2317_analyse_pdf_file.md
  - RA_2318_analyse_script.md
  - RA_2319_analyse_jar.md
  - RA_2320_analyse_filename.md
  - RA_2401_list_processes_executed.md
  - RA_2402_find_process_by_executable_path.md
  - RA_2403_find_process_by_executable_metadata.md
  - RA_2404_find_process_by_executable_hash.md
  - RA_2405_find_process_by_executable_format.md
  - RA_2406_find_process_by_executable_content_pattern.md
  - RA_2501_list_registry_keys_modified.md
  - RA_2502_list_registry_keys_deleted.md
  - RA_2503_list_registry_keys_accessed.md
  - RA_2504_list_registry_keys_created.md
  - RA_2505_list_services_created.md
  - RA_2506_list_services_modified.md
  - RA_2507_list_services_deleted.md
  - RA_2508_analyse_registry_key.md
  - RA_2601_list_users_authenticated.md
  - RA_2602_list_user_accounts.md
  - RA_3001_patch_vulnerability.md
  - RA_3101_block_external_ip_address.md
  - RA_3102_block_internal_ip_address.md
  - RA_3103_block_external_domain.md
  - RA_3104_block_internal_domain.md
  - RA_3105_block_external_url.md
  - RA_3106_block_internal_url.md
  - RA_3107_block_port_external_communication.md
  - RA_3108_block_port_internal_communication.md
  - RA_3109_block_user_external_communication.md
  - RA_3110_block_user_internal_communication.md
  - RA_3111_block_data_transferring_by_content_pattern.md
  - RA_3201_block_domain_on_email.md
  - RA_3202_block_sender_on_email.md
  - RA_3203_quarantine_email_message.md
  - RA_3301_quarantine_file_by_format.md
  - RA_3302_quarantine_file_by_hash.md
  - RA_3303_quarantine_file_by_path.md
  - RA_3304_quarantine_file_by_content_pattern.md
  - RA_3401_block_process_by_executable_path.md
  - RA_3402_block_process_by_executable_metadata.md
  - RA_3403_block_process_by_executable_hash.md
  - RA_3404_block_process_by_executable_format.md
  - RA_3405_block_process_by_executable_content_pattern.md
  - RA_3501_disable_system_service.md
  - RA_3601_lock_user_account.md
  - RA_4001_report_incident_to_external_companies.md
  - RA_4101_remove_rogue_network_device.md
  - RA_4201_delete_email_message.md
  - RA_4301_remove_file.md
  - RA_4501_remove_registry_key.md
  - RA_4502_remove_service.md
  - RA_4601_revoke_authentication_credentials.md
  - RA_4602_remove_user_account.md
  - RA_5001_reinstall_host_from_golden_image.md
  - RA_5002_restore_data_from_backup.md
  - RA_5101_unblock_blocked_ip.md
  - RA_5102_unblock_blocked_domain.md
  - RA_5103_unblock_blocked_url.md
  - RA_5104_unblock_blocked_port.md
  - RA_5105_unblock_blocked_user.md
  - RA_5201_unblock_domain_on_email.md
  - RA_5202_unblock_sender_on_email.md
  - RA_5203_restore_quarantined_email_message.md
  - RA_5301_restore_quarantined_file.md
  - RA_5401_unblock_blocked_process.md
  - RA_5501_enable_disabled_service.md
  - RA_5601_unlock_locked_user_account.md
  - RA_6001_develop_incident_report.md
  - RA_6002_conduct_lessons_learned_exercise.md
- Response_Playbooks
- Response_Stages
- images
- readthedocs
- thehive_templates
- index.md
- index_RU.md
- react.json
- react_navigator_profile.json
- responsestages.md
response_actions
response_playbooks
response_stages
scripts
.gitignore
CONTRIBUTING.md
LICENSE
README.md
README_RU.md
main.py
mkdocs.yml
requirements.txt

Response_Actions

CircleCI ATC RE&CT doc generator

Generate all the analytics from job=build branch=develop [skip ci]

Jun 27, 2021

79d166c · Jun 27, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Files

Response_Actions

Response_Actions

Files

Response_Actions

Directory actions

More options

Directory actions

More options

Latest commit

History

Response_Actions

Folders and files

parent directory