Remove Employees from Departing Employee Watchlist

Loops through Departing Employee watchlist entries from Code42 Incydr and removes employees based on specified criteria.

Code42 · 15 tasks · 2 inputs · 0 outputs

Inputs

  • incydr_username — The username (in email format) provided by Code42 Incydr.
  • look_back — Number of days to compare the departure date against and check for post-departure activity (e.g. "30", "7", etc.). Default is 30.

Commands used

code42-file-events-search code42-user-get-risk-profile code42-user-update-risk-profile code42-watchlists-remove-user

Flowchart

Yes #error# yes Start Start Is Departure Date Before Look-Back String? Is Departure Date Before ... Remove User from Departing Employee Watchlist - code42-watchlists-remove-user Remove User from Departin... code42-watchlists-remove-user Check for Post-Departure File Events in Incydr - code42-file-events-search Check for Post-Departure ... code42-file-events-search Are There Post-Departure File Events? Are There Post-Departure ... Set "Error Removing" Log Message - Set Set "Error Removing" Log ... Set Set "Removed from Watchlist" Log Message - Set Set "Removed from Watchli... Set Set "No Action Taken" Log Message - Set Set "No Action Taken" Log... Set Set "Post-Departure Activity" Log Message - Set Set "Post-Departure Activ... Set Update Incydr User Profile - code42-user-update-risk-profile Update Incydr User Profile code42-user-update-risk-profile Playbook Complete Playbook Complete Set Relative Look-Back String - Set Set Relative Look-Back St... Set Get Incydr User Profile Information - code42-user-get-risk-profile Get Incydr User Profile I... code42-user-get-risk-profile Format Departure Date for Time Comparison - Set Format Departure Date for... Set Delete User Profile Context - DeleteContext Delete User Profile Context DeleteContext