DSPM Valid User Response

The DSPM Valid User Response playbook is designed to assess and manage user responses to DSPM-identified risks. It checks the user’s selected action (e.g., creating a Jira ticket or remediating specific risk types) and initiates the appropriate remediation or notification workflows. If no user response is received, the playbook logs the incident for future action, ensuring comprehensive tracking and response handling for DSPM incidents.

DSPM · 23 tasks · 1 input · 0 outputs

Inputs

  • rerunTime — Incident re-run time (in hours)

Commands used

addToList createList getList setList

Flowchart

Jira action No Response from user Remediation action for Empty storage asset Remedition action (Sensitive asset open to world) #error# add no yes Start Start Identify User-Selected Action Identify User-Selected Ac... Send slack notification to ${userSlackEmail} - SlackBlockBuilder Send slack notification t... SlackBlockBuilder DSPM Remediation for Sensitive asset open to world - DSPM Remediation for Sensitive asset open to world DSPM Remediation for Sens... DSPM Remediation for Sensitiv... DSPM Remediation for Empty storage asset - DSPM Remediation for Empty storage asset DSPM Remediation for Empt... DSPM Remediation for Empty st... DSPM Jira Ticket Creation - DSPM Jira Ticket Creation DSPM Jira Ticket Creation DSPM Jira Ticket Creation Add incident for re-run - DSPMIncidentList Add incident for re-run DSPMIncidentList Get DSPM Incident List - getList Get DSPM Incident List getList Check incident list status? Check incident list status? Add incident in DSPM Incident list - addToList Add incident in DSPM Inc... addToList Create DSPM Incident list - createList Create DSPM Incident list createList Done Done Create Slack block sending notification to user. - DSPMCreateSimpleSlackMessageBlock Create Slack block sendin... DSPMCreateSimpleSlackMessageB... Save the above slack block to the XSOAR list. - setList Save the above slack bloc... setList Remediation path for Sensitive asset open to world risk Remediation path for Sens... Remediation path for Empty Storage asset risk. Remediation path for Empt... Jira Ticket creation path Jira Ticket creation path No response from user on the risk notification No response from user on ... Is Jira Integration Available? - IsIntegrationAvailable Is Jira Integration Avail... IsIntegrationAvailable Create Slack block for sending error message notification to user. - DSPMCreateSimpleSlackMessageBlock Create Slack block for se... DSPMCreateSimpleSlackMessageB... Save the above slack block to the XSOAR list. - setList Save the above slack bloc... setList Deleting slack block from context after saving into xsoar list. - DeleteContext Deleting slack block from... DeleteContext Deleting slack block from context after saving into xsoar list. - DeleteContext Deleting slack block from... DeleteContext