Use Case Builder Use Case Containment Steps

Details

ID	`incident_usecasebuilderusecasecontainmentsteps`
CLI Name	`usecasebuilderusecasecontainmentsteps`
Type	multiSelect
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	No
Placeholder	Select the remediation steps in your incident handling process

Select Values

Lock AD user account
Lock AD service account
EDL Block (IP/Domain/URL)
PAN-DB re-categorization
Block email sender
Quarantine email
Quarantine files
Quarantine device
Disable project
Re-image request
Password Reset
Search and destroy
External website takedown
Revoke physical badge access
Kill sessions

Associated Incident Types

Use Case Builder

Source

incidentfield-Use_Case_Containment_Steps.json

Download History Raw

{
    "associatedToAll": false,
    "associatedTypes": [
        "Use Case Builder"
    ],
    "caseInsensitive": true,
    "cliName": "usecasebuilderusecasecontainmentsteps",
    "closeForm": false,
    "content": true,
    "editForm": true,
    "group": 0,
    "hidden": false,
    "id": "incident_usecasebuilderusecasecontainmentsteps",
    "isReadOnly": false,
    "locked": false,
    "name": "Use Case Builder Use Case Containment Steps",
    "neverSetAsRequired": false,
    "openEnded": false,
    "ownerOnly": false,
    "placeholder": "Select the remediation steps in your incident handling process",
    "required": false,
    "selectValues": [
        "Lock AD user account",
        "Lock AD service account",
        "EDL Block (IP/Domain/URL)",
        "PAN-DB re-categorization",
        "Block email sender",
        "Quarantine email",
        "Quarantine files",
        "Quarantine device",
        "Disable project",
        "Re-image request",
        "Password Reset",
        "Search and destroy",
        "External website takedown",
        "Revoke physical badge access",
        "Kill sessions"
    ],
    "sla": 0,
    "system": false,
    "threshold": 72,
    "type": "multiSelect",
    "unmapped": false,
    "unsearchable": true,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "6.8.0"
}