Zimperium Incident Enrichment

Enriches Zimperium incidents.

Zimperium · 8 tasks · 0 inputs · 0 outputs

Details

ID	`Zimperium Incident Enrichment`
From Version	5.0.0
Tasks	8

README

Enriches Zimperium incidents.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

Zimperium
Zimperium v2

Scripts

IsIntegrationAvailable

Commands

zimperium-users-search
zimperium-device-get-by-id
zimperium-devices-search

Playbook Inputs

There are no inputs for this playbook.

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

Zimperium Incident Enrichment

Commands used

zimperium-device-get-by-id zimperium-devices-search zimperium-users-search

Flowchart

Source

playbook-Zimperium_Incident_Enrichment.yml

Download History Raw

id: Zimperium Incident Enrichment
version: -1
contentitemexportablefields:
  contentitemfields: {}
name: Zimperium Incident Enrichment
description: Enriches Zimperium incidents.
fromversion: 5.0.0
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: 46b2e5b0-6f4b-4756-8dbf-291520152be4
    type: start
    task:
      id: 46b2e5b0-6f4b-4756-8dbf-291520152be4
      version: -1
      name: ""
      description: ""
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "3"
      - "4"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 360,
          "y": -160
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "1":
    id: "1"
    taskid: df4f2e79-a148-4be4-8e20-a6f1f7508b74
    type: regular
    task:
      id: df4f2e79-a148-4be4-8e20-a6f1f7508b74
      version: -1
      name: Get device details by zimperium ID
      description: Retrieves details for a single device.
      script: Zimperium|||zimperium-device-get-by-id
      type: regular
      iscommand: true
      brand: Zimperium
    nexttasks:
      '#none#':
      - "2"
    scriptarguments:
      device_id: {}
      zdid:
        complex:
          root: incident
          accessor: labels.zdid
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 195
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "2":
    id: "2"
    taskid: cef0f8eb-e0ec-4e4c-89df-b068136369b5
    type: regular
    task:
      id: cef0f8eb-e0ec-4e4c-89df-b068136369b5
      version: -1
      name: Get user details by email
      description: Search users.
      script: Zimperium|||zimperium-users-search
      type: regular
      iscommand: true
      brand: Zimperium
    nexttasks:
      '#none#':
      - "7"
    scriptarguments:
      email:
        complex:
          root: incident
          accessor: Labels.userEmail
      page: {}
      query: {}
      size: {}
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 50,
          "y": 390
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "3":
    id: "3"
    taskid: 7d8a6e60-6dca-421d-8007-7a5400d82bcd
    type: condition
    task:
      id: 7d8a6e60-6dca-421d-8007-7a5400d82bcd
      version: -1
      name: Is Zimperium Integration Enabled?
      description: Returns 'yes' if the integration brand is available. Otherwise returns 'no'
      scriptName: IsIntegrationAvailable
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "7"
      "yes":
      - "1"
    scriptarguments:
      brandname:
        simple: Zimperium
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 50,
          "y": -10
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "4":
    id: "4"
    taskid: 9ec7763e-f65b-483c-80f8-762b68b224a1
    type: condition
    task:
      id: 9ec7763e-f65b-483c-80f8-762b68b224a1
      version: -1
      name: Is Zimperium v2 Integration Enabled?
      description: Returns 'yes' if the integration brand is available. Otherwise returns 'no'
      scriptName: IsIntegrationAvailable
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "7"
      "yes":
      - "5"
    scriptarguments:
      brandname:
        simple: Zimperium v2
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 640,
          "y": -10
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "5":
    id: "5"
    taskid: 8462f59a-a2be-43dc-8cf3-12b464706e4f
    type: regular
    task:
      id: 8462f59a-a2be-43dc-8cf3-12b464706e4f
      version: -1
      name: Get device details by zimperium ID
      description: Search devices.
      script: Zimperium v2|||zimperium-devices-search
      type: regular
      iscommand: true
      brand: Zimperium v2
    nexttasks:
      '#none#':
      - "6"
    scriptarguments:
      device_id:
        complex:
          root: incident
          accessor: deviceid
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 640,
          "y": 195
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "6":
    id: "6"
    taskid: d8e0b4bb-131f-4534-8be0-86696a31adc9
    type: regular
    task:
      id: d8e0b4bb-131f-4534-8be0-86696a31adc9
      version: -1
      name: Get user details by email
      description: Search users. Only a user created as a "Team admin" is authorized to perform this request. Also, it will only get information about the teams that this user is associated with. Users that are not part of any team (such as account admin) won’t appear in the response.
      script: Zimperium v2|||zimperium-users-search
      type: regular
      iscommand: true
      brand: Zimperium v2
    nexttasks:
      '#none#':
      - "7"
    scriptarguments:
      email:
        complex:
          root: incident
          accessor: deviceusername
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 640,
          "y": 390
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "7":
    id: "7"
    taskid: d140665f-d184-444d-8d36-145f590b9a82
    type: title
    task:
      id: d140665f-d184-444d-8d36-145f590b9a82
      version: -1
      name: Done
      type: title
      iscommand: false
      brand: ""
      description: ''
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 360,
          "y": 560
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
system: true
view: |-
  {
    "linkLabelsPosition": {
      "3_1_yes": 0.47
    },
    "paper": {
      "dimensions": {
        "height": 785,
        "width": 970,
        "x": 50,
        "y": -160
      }
    }
  }
inputs: []
outputs: []
tests:
 -  No tests