DSPM Remediation for Sensitive asset open to world

The DSPM Remediation playbook for Sensitive Asset Open to World is designed to handle incidents where sensitive assets are exposed to the public, with specific focus on remediating this vulnerability across several cloud providers(for example AWS).

DSPM · 26 tasks · 0 inputs · 0 outputs

Commands used

aws-s3-put-public-access-block azure-storage-container-block-public-access dspm-get-asset-files-by-id dspm-update-risk-finding-status gcs-block-public-access-bucket setList

Flowchart

AWS Azure GCP no yes no yes no yes no yes no yes Start Start aws-s3-put-public-access-block - aws-s3-put-public-access-block aws-s3-put-public-access-... aws-s3-put-public-access-block Check the Cloud Provider of asset Check the Cloud Provider ... Have you encountered any errors with mitigating asset risk? - DSPMCheckAndSetErrorEntries Have you encountered any ... DSPMCheckAndSetErrorEntries Updating DSPM risk - ${incident.riskFindingId} status to 'INVESTIGATING'. - dspm-update-risk-finding-status Updating DSPM risk - ${in... dspm-update-risk-finding-status Have encountered any errors while updating risk status on DSPM portal? - DSPMCheckAndSetErrorEntries Have encountered any erro... DSPMCheckAndSetErrorEntries Add incident for re-run - DSPMIncidentList Add incident for re-run DSPMIncidentList Is AWS - S3 Integration Available? - IsIntegrationAvailable Is AWS - S3 Integration A... IsIntegrationAvailable Is Azure Storage Container Integration Available? - IsIntegrationAvailable Is Azure Storage Containe... IsIntegrationAvailable Is Google Cloud Storage Integration Available? - IsIntegrationAvailable Is Google Cloud Storage I... IsIntegrationAvailable gcs-block-public-access-bucket - gcs-block-public-access-bucket gcs-block-public-access-b... gcs-block-public-access-bucket AWS AWS Azure Azure Google Cloud Provider (GCP) Google Cloud Provider (GCP) Done Done Create Slack block for sending success message notification to user. - DSPMCreateSimpleSlackMessageBlock Create Slack block for se... DSPMCreateSimpleSlackMessageB... Save the above slack block to the XSOAR list. - setList Save the above slack bloc... setList Create Slack block for sending error message notification to user. - DSPMCreateSimpleSlackMessageBlock Create Slack block for se... DSPMCreateSimpleSlackMessageB... Create Slack block for sending error message notification to user. - DSPMCreateSimpleSlackMessageBlock Create Slack block for se... DSPMCreateSimpleSlackMessageB... Save the above slack block to the XSOAR list. - setList Save the above slack bloc... setList Create Slack block for sending error message notification to user. - DSPMCreateSimpleSlackMessageBlock Create Slack block for se... DSPMCreateSimpleSlackMessageB... Deleting slack block from context data after saving into xsoar list. - DeleteContext Deleting slack block from... DeleteContext Deleting slack block from context data after saving into xsoar list. - DeleteContext Deleting slack block from... DeleteContext dspm-get-asset-files-by-id - dspm-get-asset-files-by-id dspm-get-asset-files-by-id dspm-get-asset-files-by-id Get azure containers - DSPMGetContianers Get azure containers DSPMGetContianers azure-storage-container-block-public-access - azure-storage-container-block-public-access azure-storage-container-b... azure-storage-container-block...