Rubrik DSPM Violation Remediation - Rubrik Security Cloud

This playbook remediates DSPM violations by retrieving violation details and affected file information, downloading the affected file details and remediation logs as CSV files, quarantining the affected files and updating the violation status.

Rubrik Security Cloud · 19 tasks · 6 inputs · 0 outputs

Inputs

  • violation_id — The ID of the DSPM violation. Note: Users can get the violation ID by executing the "rubrik-data-security-violation-list" command.
  • object_id — The object ID. Note: Users can retrieve the object ID by executing the "rubrik-polaris-objects-list" command.
  • snapshot_id — The snapshot ID. Note: Users can retrieve the snapshot ID by executing the "rubrik-polaris-object-snapshot-list" command.
  • object_name — The object Name. Note: If not specified playbook will retrieve it using the "rubrik-data-security-violation-get" command.
  • limit — Number of results to retrieve in the response. The maximum allowed size is 1000.
  • quarantine_folder_id — The ID of the quarantine folder where the affected files will be moved.

Commands used

rubrik-data-security-violation-csv-download rubrik-data-security-violation-log-download rubrik-data-security-violation-status-update

Flowchart

yes YES No Yes yes Start Start Is Rubrik Security Cloud integration enabled? Is Rubrik Security Cloud ... Set the delete keys - Set Set the delete keys Set Clear Previous Inputs - DeleteContext Clear Previous Inputs DeleteContext Check whether the DSPM Violation information is available in playbook input Check whether the DSPM Vi... Collect the DSPM violation information Collect the DSPM violatio... Sync the Violation Information Sync the Violation Inform... Retrieve DSPM violation files information - RubrikPullDSPMViolationFileInformation Retrieve DSPM violation f... RubrikPullDSPMViolationFileIn... Download the files at risk CSV file - rubrik-data-security-violation-csv-download Download the files at ris... rubrik-data-security-violatio... Download the remediation Log file - rubrik-data-security-violation-log-download Download the remediation ... rubrik-data-security-violatio... Whether to update the status of the violation Whether to update the sta... Collect the new status of the violation Collect the new status of... Update the status of the DSPM violation - rubrik-data-security-violation-status-update Update the status of the ... rubrik-data-security-violatio... Done Done Retrieve DSPM violation data - RubrikPullDSPMViolationInformation Retrieve DSPM violation data RubrikPullDSPMViolationInform... Quarantine the files Quarantine the files Update the violation status Update the violation status Are the file paths available? Are the file paths availa... Rubrik Quarantine Files General - Rubrik Quarantine Files General Rubrik Quarantine Files G... Rubrik Quarantine Files General