Splunk Phantom Tips: ES Notable Playbook Validation

When using Splunk Phantom to process notable events from Splunk ES, a best practice is to validate that the playbook the analyst is running is the right one for that notable event and they are running it on the correct artifact. Here are two tips for doing just that: Decision Block At the beginning of [...]

Splunk Phantom Tips: How to Get the Username of the User Who Ran a Playbook in That Playbook

This is an issue I ran into recently. I wanted to assign a task to the user who ran a playbook, but that was easier said than done. The first step is to get the effective_user_id of the playbook. We can do this by creating a custom code block, so that we can pass around [...]

Using WordPress Transients for Speed and Profit

In this post, I'll be going over what transients are, how to use them, and why you should use them. What are Transients? Transients are a way to cache information in WordPress.  They are very similar to WordPress Options with one key difference: Transients include a lifespan.  We'll get into what that means in the next [...]