Rubrik Fileset Ransomware Discovery - Rubrik Polaris

This playbook performs IOC Scan on fileset object. It also creates tickets on ServiceNow using "ServiceNow v2" integration. Supported integrations: - RubrikPolaris - ServiceNow v2

Rubrik Security Cloud · 15 tasks · 2 inputs · 0 outputs

Inputs

  • ClusterId — Cluster ID of the incident.
  • ObjectId — Object ID of the incident.

Commands used

servicenow-add-comment servicenow-create-ticket servicenow-update-ticket

Flowchart

yes yes yes yes yes Start Start Collect IOC data Collect IOC data Whether to fetch Yara rule(s) from a URL? Whether to fetch Yara rul... Fetch Yara rule(s) from file URL - http Fetch Yara rule(s) from f... http Set default value for IOC YaraRule - Set Set default value for IOC... Set Is ServiceNow integration enabled? Is ServiceNow integration... Create SNOW ticket - servicenow-create-ticket Create SNOW ticket servicenow-create-ticket Is SNOW ticket created? Is SNOW ticket created? Print scan status message - Print Print scan status message Print Add comment in SNOW ticket - servicenow-add-comment Add comment in SNOW ticket servicenow-add-comment Close SNOW ticket - servicenow-update-ticket Close SNOW ticket servicenow-update-ticket Done Done Is Rubrik Polaris enabled? Is Rubrik Polaris enabled? Is object type Fileset? Is object type Fileset? Rubrik IOC Scan - Rubrik Polaris - Rubrik IOC Scan - Rubrik Polaris Rubrik IOC Scan - Rubrik ... Rubrik IOC Scan - Rubrik Polaris