Darkmon - Auto-Disable Allowlist

Comma-separated usernames or DNs that must NEVER be auto-disabled (e.g. ceo@acme.com, svc-monitor). Override for the Compromised Employee Auto-Disable playbook.

Darkmon plain_text

Details

IDDarkmon - Auto-Disable Allowlist
Typeplain_text
From Version6.8.0
TruncatedNo
Marketplacesxsoar marketplacev2 platform

Contents

This list ships empty — the pack defines it so a tenant can fill it in.

Source

list-Darkmon_Auto-Disable_Allowlist.json
Download History Raw 
{
    "id": "Darkmon - Auto-Disable Allowlist",
    "version": -1,
    "name": "Darkmon - Auto-Disable Allowlist",
    "description": "Comma-separated usernames or DNs that must NEVER be auto-disabled (e.g. ceo@acme.com, svc-monitor). Override for the Compromised Employee Auto-Disable playbook.",
    "type": "plain_text",
    "fromVersion": "6.8.0",
    "itemVersion": "",
    "locked": false,
    "nameLocked": false,
    "packID": "Darkmon",
    "system": false,
    "marketplaces": [
        "xsoar",
        "marketplacev2",
        "platform"
    ],
    "supportedModules": [
        "xsiam",
        "agentix"
    ]
}