Process Incident - Vectra Detect

This playbook is used to initiate the processing of an incident. This playbook runs when a pending incident is selected for investigation. It will change the state from pending to active and it will list the available users in Vectra and request the user ID to use for assignment. Once the data collection is complete, it will call the Dispatch Incident - Vectra Detect playbook.

Vectra AI · 12 tasks · 2 inputs · 0 outputs

Inputs

  • entity_id — ID of the entity.
  • entity_type — Type of the entity.

Commands used

vectra-search-users

Flowchart

yes Other Username yes Start Start Done Done Get the Vectra username to assign the current entity. Get the Vectra username t... Delete the context of user ID. - DeleteContext Delete the context of use... DeleteContext List Available Users for Assignment. - vectra-search-users List Available Users for ... vectra-search-users Add entity notes to the layout. - VectraDetectAddNotesInLayouts Add entity notes to the l... VectraDetectAddNotesInLayouts Add Note - Vectra Detect - Add Note - Vectra Detect Add Note - Vectra Detect Add Note - Vectra Detect Is VectraDetect Integration Enabled? Is VectraDetect Integrati... Dispatch Incident - Vectra Detect - Dispatch Incident - Vectra Detect Dispatch Incident - Vectr... Dispatch Incident - Vectra De... User selected a username from a given list. User selected a username ... Set the user ID. - Set Set the user ID. Set Get the user ID based on username. - vectra-search-users Get the user ID based on ... vectra-search-users