URL-Specific Atomic Runbooks

URLs are common in alerts related to web-based threats, phishing campaigns, and malware delivery. These atomic runbooks provide procedures to analyze URLs, retrieve threat intelligence, and search for their occurrences in logs, helping to determine their maliciousness and impact.

URL Runbooks:

• Atomic Runbook: Get URL Reputation from GTI
• Atomic Runbook: Get URL Threat Intel via SecOps MCP
• Atomic Runbook: Search URL Activity in Chronicle