Workflows - Submit Takedown
A new Submit Takedown action in the Workflow Builder automates takedown submissions for Digital Risk Protection alerts, available on the Post-Digital Risk Alert Analysis trigger. A takedown is submitted only when the alert carries qualifying evidence, such as your assets or logo in the page content or a login form, and the workflow records why when it does not.
Respond - Custom Playbooks
Custom Playbooks let you build your own playbooks in GreyMatter for actions that do not exist as a native playbook today. Choose one of your existing integrations, define the action and its inputs, and the playbook is available everywhere native playbooks are: Respond, Workflows, and Investigations, with runs recorded in Respond Activity. Supported at launch: Tines, Palo Alto Networks Cortex XSOAR, CrowdStrike Falcon Fusion SOAR, Google Security Operations SOAR, Microsoft Azure Logic Apps, Splunk SOAR, Swimlane Turbine, and Torq.
Attack - GreyMatter Attack
GreyMatter Attack runs autonomous, agent-driven attack campaigns against your own environment to test how well your defenses hold up. Start a campaign from an Intel item, a plain-language description or an uploaded pentest report; Attack plans it, shows you the Work Plan for approval, then runs it within your agreed rules of engagement. Each campaign ends with a Campaign Score Report that scores both the attack and your defensive response and recommends how to close the gaps.
