Identifier_Activity_Analysis_Dispatch.yml

name: Identifier Activity Analysis Dispatch
id: fc0edc96-ab1f-48b9-1b4d-63da52dbfa74
version: 1
date: '2023-02-28'
author: Lou Stella, Splunk
type: Investigation
description: "Detects available indicators and routes them to related identifier activity analysis playbooks. The output of the analysis will update any artifacts, tasks, and indicator tags."
playbook: Identifier_Activity_Analysis_Dispatch
how_to_implement: This playbook looks for artifacts and then dispatches the community Related Tickets playbooks. This playbook takes the output of those playbooks and nicely formats them into notes and tags indicators with their results.   
references: []
app_list: []
tags:
  platform_tags: []
  playbook_type: Automation
  vpe_type: Modern
  playbook_fields: []
  product:
  - Splunk SOAR
  use_cases:
  - Enrichment
  defend_technique_id: 
  - D3-IAA