Red Canary: Automate
Section for articles involving Red Canary Automation.
- How To Be Notified When an Endpoint Is Isolated
- Unwanted Software Not Killed Nor Files Deleted/Captured in Automation Playbook
- Identity Automate Actions Limitations
- Google Chat Spaces notification webhook
- Playbook action reporting as "INCOMPLETE"
- Searching for External Alerts when Testing a Playbook
- Playbook is unsupported
- Setup a Playbook to Automatically Create Zendesk Tickets
- $Event and $Endpoint variables not showing data in Automate email notifications
- Receiving playbook notifications after a threat has been remediated
- Threat was not auto-remediated
- Syslog playbook fails with Tag must not be longer than 32 characters error
- Object Attributes for Playbook Actions Are Case Sensitive
- Isolation fails with unexpected error
- Automate Playbook failed to trigger
- SMS not sending to India
- Automate Playbook Will Fail If The Trigger Is Set For External Alert Data, But the Playbook Is Configured For Threat Data
- Can We Use Filter Operations On Our Playbook Payload Variables?
- Multiple Action Approval Request over Slack
- How to Setup an Automate Trigger and Playbook to Execute Based on Time of Day and Day of the Week
- Using Automation to Decommission an Endpoint
- Send a notification when a decommissioned endpoint status changes
- Running custom scripts via Automate
- Automate Trigger Condition Descriptions
- Automate: Actioning Indicators of Compromise (IOCs)
- Automate Trigger Variables