Get Code42 Employee Information

Receives usernames from a Code42 Incydr alert and queries Active Directory for employee and supervisor information, if applicable.

Code42 · 14 tasks · 2 inputs · 5 outputs

Inputs

  • user — The username to query in Active Directory.
  • incidentid — The Palo Alto XSOAR incident ID that receives the employee information (optional).

Outputs

  • Account.DisplayName — The display name of the user.
  • Account.Manager — The manager of the user.
  • Account.Username — The samAccountName of the user.
  • Account.Email — The email address of the user.
  • Account.department — The Department of the user.

Commands used

ad-get-user setIncident

Flowchart

Display Name Email yes yes yes no yes Start Start Is Input an Email, Display Name, or Username? Is Input an Email, Displa... Query Active Directory via Email - ad-get-user Query Active Directory vi... ad-get-user Query Active Directory via Display Name - ad-get-user Query Active Directory vi... ad-get-user Query Active Directory via Username - ad-get-user Query Active Directory vi... ad-get-user Does Incident ID Exist? Does Incident ID Exist? Set Manager Incident Info - setIncident Set Manager Incident Info setIncident Done Done Query Active Directory for Manager - ad-get-user Query Active Directory fo... ad-get-user Get Manager Data Get Manager Data Does Manager Attribute Exist? Does Manager Attribute Ex... Set Employee Incident Info - setIncident Set Employee Incident Info setIncident Does Incident ID Exist? Does Incident ID Exist? Is Active Directory Available? - IsIntegrationAvailable Is Active Directory Avail... IsIntegrationAvailable