Jira_Related_Tickets_Search.yml

name: Jira Related Tickets Search
id: bd20698c-42d6-45ec-b7a0-fc356d624bdf
version: 1
date: '2023-08-22'
author: Eric Li, Splunk
type: Investigation
description: "Accepts a user or device and identifies if related tickets exists in a timeframe of last 30 days. Generates a global report and list of observables."
playbook: Jira_Related_Tickets_Search
how_to_implement: This input playbook requires the Jira connector to be configured. It is designed to work in conjunction with the Dynamic Related Tickets Search playbook or other playbooks in the same style.
references:
  - https://d3fend.mitre.org/technique/d3f:IdentifierReputationAnalysis/
app_list:
  - Jira
tags:
  platform_tags:
    - user
    - device
    - host name
    - ticket
    - Jira
  playbook_type: Input
  vpe_type: Modern
  playbook_fields: []
  product:
  - Splunk SOAR
  defend_technique_id:
  - D3-IRA