McAfee ePO Endpoint Compliance Playbook v2

Discover endpoints that are not using the latest McAfee AV signatures.

McAfee ePO · 12 tasks · 0 inputs · 0 outputs

Commands used

closeInvestigation epo-get-current-dat epo-get-latest-dat epo-update-client-dat setIncident

Flowchart

No Yes No Yes start_task start_task Retrieve ePO's current DAT version - epo-get-current-dat Retrieve ePO's current DA... epo-get-current-dat Are any endpoints outdated and using an older DAT version? Are any endpoints outdate... Are any endpoints faulty and dangerously outdated? Are any endpoints faulty ... Isolate dangerous systems from network Isolate dangerous systems... Open ServiceNow ticket for outdated Endpoints - ServiceNowCreateIncident Open ServiceNow ticket fo... ServiceNowCreateIncident Trigger signature update on outdated endpoints - epo-update-client-dat Trigger signature update ... epo-update-client-dat Close the investigation - closeInvestigation Close the investigation closeInvestigation Get McAfee latest DAT Version - epo-get-latest-dat Get McAfee latest DAT Ver... epo-get-latest-dat Store system names to context key outdatedEndpoints - commentsToContext Store system names to con... commentsToContext Store system names to context key endpointsToIsolate - commentsToContext Store system names to con... commentsToContext Set incident severity to High - setIncident Set incident severity to ... setIncident