Eradication Plan - Delete File

This playbook is one of the sub-playbooks in the eradication plan. This playbook executes actions of file deletion, which is a crucial step in the eradication process.

Common Playbooks · 5 tasks · 3 inputs · 0 outputs

Inputs

  • FileRemediation — Choose 'Quarantine' or 'Delete' to avoid file remediation conflicts. For example, choosing 'Delete' ignores the 'Quarantine file' task under the containment playbook and executes only file deletion.
  • EndpointID — The endpoint ID.
  • FilePath — The file path for the file deletion task.

Commands used

core-get-script-execution-results core-run-script-delete-file

Flowchart

yes Start Start Auto file deletion - core-run-script-delete-file Auto file deletion core-run-script-delete-file Done - File Deletion Done - File Deletion Get command result - core-get-script-execution-results Get command result core-get-script-execution-res... Should delete the file? Should delete the file?