McAfee ePO Endpoint Compliance Playbook Deprecated Hidden

Deprecated. Use "McAfee ePO Endpoint Compliance Playbook v2" playbook instead. Discover endpoints that are not using the latest McAfee AV Signatures

Deprecated Content (Deprecated) · 13 tasks · 0 inputs · 0 outputs

Commands used

epo-get-current-dat epo-get-latest-dat epo-update-client-dat servicenow-incident-create servicenow-incidents-query

Flowchart

No Yes No Yes start_task start_task Retrieve ePO's current DAT version - epo-get-current-dat Retrieve ePO's current DA... epo-get-current-dat Are any endpoints outdated and using an older DAT version? Are any endpoints outdate... Are any endpoints faulty and dangerously outdated? Are any endpoints faulty ... Isolate dangerous systems from network Isolate dangerous systems... Open ServiceNow ticket with list of problematic endpoints to be handled by the appropriate team - servicenow-incident-create Open ServiceNow ticket wi... servicenow-incident-create Trigger signature update on outdated endpoints - epo-update-client-dat Trigger signature update ... epo-update-client-dat Display list of AV related tickets from ServiceNow - servicenow-incidents-query Display list of AV relate... servicenow-incidents-query Close the investigation - CloseInvestigation Close the investigation CloseInvestigation Get McAfee latest DAT Version - epo-get-latest-dat Get McAfee latest DAT Ver... epo-get-latest-dat Store system names to context key outdatedEndpoints - commentsToContext Store system names to con... commentsToContext Store system names to context key endpointsToIsolate - commentsToContext Store system names to con... commentsToContext Set incident severity to High - IncidentSet Set incident severity to ... IncidentSet