Eradication Plan - Delete File

This playbook is one of the sub-playbooks in the eradication plan. This playbook executes actions of file deletion, which is a crucial step in the eradication process.

Pack

CommonPlaybooks

Tasks

5

Inputs

• FileRemediation — Choose 'Quarantine' or 'Delete' to avoid file remediation conflicts. For example, choosing 'Delete' ignores the 'Quarantine file' task under the containment playbook and executes only file deletion.
• EndpointID — The endpoint ID.
• FilePath — The file path for the file deletion task.

Commands used

• core-get-script-execution-results
• core-run-script-delete-file