Rubrik Anomaly Incident Response - Rubrik Polaris

This playbook will investigate an anomaly incident ingested by the integration "RubrikPolaris", enrich its data, and perform a remediation according to the incident's object type.

Rubrik Security Cloud · 21 tasks · 0 inputs · 0 outputs

Flowchart

yes yes yes yes Advance Threat Hunt v2 Turbo threat Hunt Start Start Rubrik Data Object Discovery - Rubrik Polaris - Rubrik Data Object Discovery - Rubrik Polaris Rubrik Data Object Discov... Rubrik Data Object Discovery ... Done Done Collect ransomware discovery and recovery data Collect ransomware discov... Is object type Fileset? Is object type Fileset? Rubrik Polaris - Anomaly Analysis - Rubrik Polaris - Anomaly Analysis Rubrik Polaris - Anomaly ... Rubrik Polaris - Anomaly Anal... Is object type VM? Is object type VM? Enrich object Enrich object Perform appropriate object ransomware discovery and recovery Perform appropriate objec... Shall recovery be performed? Shall recovery be performed? Is file recovery selected? Is file recovery selected? Rubrik Ransomware Discovery and File Recovery - Rubrik Polaris - Rubrik Ransomware Discovery and File Recovery - Rubrik Polaris Rubrik Ransomware Discove... Rubrik Ransomware Discovery a... Rubrik Fileset Ransomware Discovery - Rubrik Polaris - Rubrik Fileset Ransomware Discovery - Rubrik Polaris Rubrik Fileset Ransomware... Rubrik Fileset Ransomware Dis... Rubrik Ransomware Discovery and VM Recovery - Rubrik Polaris - Rubrik Ransomware Discovery and VM Recovery - Rubrik Polaris Rubrik Ransomware Discove... Rubrik Ransomware Discovery a... Rubrik Object Context Analysis - Rubrik Polaris - Rubrik Object Context Analysis - Rubrik Polaris Rubrik Object Context Ana... Rubrik Object Context Analysi... Rubrik User Access Analysis - Rubrik Polaris - Rubrik User Access Analysis - Rubrik Polaris Rubrik User Access Analys... Rubrik User Access Analysis -... Rubrik Retrieve Anomaly Result - Rubrik Security Cloud - Rubrik Retrieve Anomaly Result - Rubrik Security Cloud Rubrik Retrieve Anomaly R... Rubrik Retrieve Anomaly Resul... Run threat hunt Run threat hunt Run Turbo threat hunt or Advance threat hunt v2 Run Turbo threat hunt or ... Rubrik Turbo IOC Scan - Rubrik Polaris - Rubrik Turbo IOC Scan - Rubrik Polaris Rubrik Turbo IOC Scan - R... Rubrik Turbo IOC Scan - Rubri... Rubrik IOC Scan v2 - Rubrik Polaris - Rubrik IOC Scan v2 - Rubrik Polaris Rubrik IOC Scan v2 - Rubr... Rubrik IOC Scan v2 - Rubrik P...