Remove Employees from Departing Employee Watchlist

Loops through Departing Employee watchlist entries from Code42 Incydr and removes employees based on specified criteria.

Pack

Code42

Tasks

15

Inputs

• incydr_username — The username (in email format) provided by Code42 Incydr.
• look_back — Number of days to compare the departure date against and check for post-departure activity (e.g. "30", "7", etc.). Default is 30.

Commands used

• code42-file-events-search
• code42-user-get-risk-profile
• code42-user-update-risk-profile
• code42-watchlists-remove-user