DLP - Get User Feedback

Get the user feedback on a blocked file, whether it is false or true positive and if an exemption is needed.

Pack

Palo_Alto_Networks_Enterprise_DLP

Tasks

24

Inputs

• UserDisplayName — The display name of the user.
• MessageApp — Choose the application to communicate with the users. Available options: - Slack - Microsoft Teams
• SendMailInstance — The name of the instance to be used when executing the "send-mail" command in the playbook. In case it will be empty, all available instances will be used (default).
• UserEmail — The user email address.
• Detections — Detected violation snippets.

Outputs

• UserRequestedExemption — Whether the user requested exemption or not.

Commands used

• pan-dlp-exemption-eligible
• pan-dlp-update-incident
• setIncident