is it possible to run retrohunt from playbook ?
Page 1 / 1
Hello @vanitharaj1208
Yes its possible to execute Retro hunt from the playbook using Action "Execute Retrohunt" from GoogleChronicle. Rule ID, Start time and End time is required.
Reference: Google SecOps | Google Security Operations | Google Cloud
Thanks
I have a rule that previously generated detections, but now when I attempt to run a retro hunt, it is not generating any alerts.
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.