Rubrik Object Context Analysis - Rubrik Polaris

This playbook will investigate based on the object type from the Rubrik Anomaly incident to retrieve the policy hits of the files related to the object.

Pack

RubrikPolaris

Tasks

5

Inputs

• object_id — The Object ID or the Snappable ID. Default can be received from incident if present.
• object_type — The Object type. Default can be received from incident if present.

Commands used

• rubrik-threat-monitoring-matched-object-get