DSPM Re-run incident

The "DSPM Re-run Incident" playbook is designed to automatically re-run DSPM incidents. It starts by executing the RerunDSPMIncidents task, which reinitiates the incidents for further investigation or processing. After completing this task, the playbook proceeds to close the current incident using the closeInvestigation script. This playbook ensures that DSPM incidents can be efficiently retried and closed upon completion.

DSPM · 4 tasks · 1 input · 0 outputs

Inputs

  • rerunTime — Incident re-run time (in hours)

Commands used

closeInvestigation

Flowchart

Start Start closeInvestigation - closeInvestigation closeInvestigation closeInvestigation Re-run DSPM Incidents - DSPMRerunIncidents Re-run DSPM Incidents DSPMRerunIncidents Done Done