Incident response by playbook: TheHive 5, PagerDuty, Mattermost

On an incident signal the scenario alerts Mattermost, opens a TheHive 5 ticket and creates a PagerDuty incident, while 'ack' and 'resolve' buttons update the status everywhere.

  • One signal starts the whole plan
  • Team alert in Mattermost
  • A TheHive 5 ticket, a PagerDuty incident
  • 'Ack' and 'resolve' buttons update the status
Webhook