Rubrik Quarantine Files using MS Graph Search

This playbook quarantines files using the Microsoft Graph Search (O365 File Management) integration by downloading them, uploading them to a quarantine folder and deleting them from their original location.

Rubrik Security Cloud · 16 tasks · 3 inputs · 0 outputs

Inputs

  • file_path — The file path of the file to quarantine in OneDrive/SharePoint.
  • file_name — The name of the file to quarantine.
  • quarantine_folder_id — The ID of the quarantine folder where the file will be uploaded.

Commands used

msgraph-delete-file msgraph-download-file msgraph-search-content msgraph-upload-new-file

Flowchart

yes #error# #error# #error# yes yes yes Start Start Are O365 File Management and Microsoft Graph Search integrations enabled? Are O365 File Management ... Set the delete keys - Set Set the delete keys Set Clear Previous Inputs - DeleteContext Clear Previous Inputs DeleteContext Get the ID of the file - msgraph-search-content Get the ID of the file msgraph-search-content Download the file - msgraph-download-file Download the file msgraph-download-file Upload the file to the quarantine folder - msgraph-upload-new-file Upload the file to the qu... msgraph-upload-new-file Delete the file from its original location - msgraph-delete-file Delete the file from its ... msgraph-delete-file Collect the quarantine folder ID Collect the quarantine fo... Is quarantine folder ID present in the playbook inputs? Is quarantine folder ID p... Done Done Is file information present in the playbook inputs? Is file information prese... Collect the file information Collect the file information Is file information found? Is file information found? Print file not found message - Print Print file not found message Print Print failed to quarantine the file - Print Print failed to quarantin... Print