Library
What will you build?
Get inspiration for your next build with this library of pre-built examples of Tines in action.
Featured stories
Monitor and deactivate long-lasting AWS IAM keysMonitor AWS IAM access keys and deactivate any that are older than 30 days. Notify users if their keys are scheduled to be deactivated.Tools: AWS
Download Code42 CasesGet and download all Cases from Code42. These cases will be emailed as an attachment and uploaded to a new Jira Ticket.Tools: Code42, Jira Software
How it works
Instantly import stories to your tenant where you can adapt them to meet your unique business requirements.
Explore
Import
Adapt
TeamsSee what your team
See what your team
can build with Tines
Use casesGet inspired by
Get inspired by
our featured use cases
Contain or release hosts in CrowdStrike from JiraReceive containment or lift-containment requests from Jira, isolate or release the host in CrowdStrike, and post the outcome back to the ticket, with an AI-reviewed RTR command option for advanced remediation.By Tools: CrowdStrike, Jira Software
Request and approve Slack posts to a restricted channelRoute Slack requests to post in a restricted #general channel to an admin channel for approval, then post, log, or reject them with feedback.Tools: Slack
Sync Insider Threat Matrix records and attach to CasesRetrieve categories from the Insider Threat Matrix website, sync them into a Tines Stories record type, and let analysts attach or detach matching records from Cases.
Lookup IOCs via Slack using an agentLook up submitted IOCs from a Slack slash command, analyze them with an AI agent across AbuseIPDB, VirusTotal, and URLScan.io, and post the results back to the Slack thread.Tools: AbuseIPDB, Slack, URLScan.io, VirusTotal
Extract certificate chain and upload to custom CA in TinesExtract the server, intermediate, and root certificates from your Tines tenant, then upload the full chain to the default custom certificate authority via the Tines API for tenant-wide trust.
Detect deepfakes with Reality Defender and triage in JiraAnalyze uploaded files for deepfakes using Reality Defender, enrich results with Twilio phone and EmailRep email intelligence, then create Jira tickets, Cases, and Slack alerts for suspicious submissions.Tools: EmailRep, Reality Defender, Slack, Twilio
Generate a branching text adventure using the AI Agent actionGenerate an interactive, branching adventure story game with an AI Agent action and illustrate each choice with images.
Triage Azure Sentinel incidents with AI AgentMonitor new Azure Sentinel incidents, triage them with the Tines Stories AI Agent action using VirusTotal and Log Analytics context, then update the incident, post a comment, and alert Slack.By Tools: Microsoft, Microsoft Azure, Slack
Create Jira issues from Google Threat Intelligence DTM alertsMonitor Google Threat Intelligence DTM alerts on a schedule and automatically create Jira issues for HIGH and MEDIUM severity alerts to accelerate incident response.By Tools: Google, Jira Software
Manage Sharepoint sitesQuery the Microsoft Office 365 API to get reporting information about all current Sharepoint sites and send this information to Jira.Tools: Jira Software, Microsoft, Microsoft Teams
Analyze URLS for fraud and abuseMitigate fraud risk by extracting URL images found on a public page, e.g. a Pinterest board, and analyzing each one for fraud and abuse using the OCR API. Then create a Zendesk ticket where an analyst can automatically flag content deemed as malicious.Tools: Zendesk
Add URLhaus URLS to Cisco Umbrella deny listGet new suspicious URLs from the URLHaus and add them to a Cisco Umbrella destination list that can be used to block access.Tools: Abuse.ch, CiscoSubmit your story
We’d love to hear your ideas or see what you’ve created.