is it possible to run retrohunt from playbook ?
Solved
Can we execute a retro hunt using the playbook based on the provided timeline?
+14- Silver 2
Best answer by RanjithHegdeK
Hello @vanitharaj1208
Yes its possible to execute Retro hunt from the playbook using Action "Execute Retrohunt" from GoogleChronicle. Rule ID, Start time and End time is required.
Reference: Google SecOps | Google Security Operations | Google Cloud
Thanks
+2- Bronze 1
- Answer
Hello @vanitharaj1208
Yes its possible to execute Retro hunt from the playbook using Action "Execute Retrohunt" from GoogleChronicle. Rule ID, Start time and End time is required.
Reference: Google SecOps | Google Security Operations | Google Cloud
Thanks
+14- Silver 2
I have a rule that previously generated detections, but now when I attempt to run a retro hunt, it is not generating any alerts.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.