Splunk SOAR Playbooks: Cisco Umbrella DNS Denylisting Splunk Apr 10, 2024 Splunk Share: Share on Facebook Share on Twitter Share on LinkedIn Share through email The Cisco Umbrella DNS Denylisting playbook is an input playbook that accepts a domain or list of domains as an input and then allows you to block the given domain(s) in Cisco Umbrella.