Calculate Severity - Critical assets Deprecated Hidden

Deprecated. Use Calculate Severity - Critical Assets v2 playbook instead. Determines if a critical assest is associated with the invesigation. The playbook returns a severity level of \"Critical\" if a critical asset is associated with the investigation.\n\nThis playbook verifies if a user account or an endpoint is part of a critical list or a critical AD group.

Deprecated Content (Deprecated) · 12 tasks · 5 inputs · 1 output

Inputs

  • CriticalUsers — Array of usernames of critical users (comma separated).
  • CriticalEndpoints — Array of hostnames of critical endpoints (comma separated).
  • CriticalGroups — Array of DN names of critical AD groups (comma separated).
  • Account — A user account to check against the critical lists.
  • Endpoint — An endpoint to check against the critical lists.

Outputs

  • Severity — The output severity

Flowchart

yes yes yes yes yes yes yes yes Start Start Check for critical entities Check for critical entities Is there a username? Is there a username? Is there a username on the "CriticalUsers" list? Is there a username on th... Done Done Set severity to "Critical" - Set Set severity to "Critical" Set Is there a hostname? Is there a hostname? Is there a hostname on the "CriticalEndpoints" list? Is there a hostname on th... Is there an user account AD group that is part of the "CriticalGroups" list. Is there an user account ... Is there an endpoint AD group that is part of the "CriticalGroups" list. Is there an endpoint AD g... Are there AD groups for an Endpoint? Are there AD groups for a... Are there AD groups for a user account? Are there AD groups for a...