GenerateASMReport

Details

ID	`GenerateASMReport`
Language	python
From Version	6.5.0
Docker Image	`demisto/python3:3.12.13.10116658`

README

Generate an ASM Alert Summary report.

Script Data

Name	Description
Script Type	python3
Cortex XSOAR Version	6.5.0

Inputs

Argument Name	Description
alert_id	Numerical ID of the ASM alert.
alert_name	Name of the alert that triggered this playbook.
alert_details	Details of the alert that triggered this playbook.
alert_severityStr	ASM alert severity string.
asm_service_owner	Potential service owners gathered through the playbook.
asm_remediation	Collect information on remediation action(s).
asm_service_detection	Pre/Post remediation scan to check if the service is still detectable.
asm_system_ids	Related system identifiers.
asm_cloud	Information on cloud assets.
asm_notification	Information on notification(s) sent via the ASM playbook.
asm_data_collection	Collect information on data collection tasks.
asm_tags	Tags from objects that can be used to determine other information (if server is Dev for example).
asm_private_ip	Private IP addresses found.
asm_related	Related or duplicate objects.
asm_remediation_path_rule	Matched remediation path rule (if there is a match).
asm_service_id	External Service ID for generating Service Summary.
asm_asset_id	Asset ID related to alert.
report_type	Type of report to generate (Analysis report after enrichment or Summary).
asm_remediation_guidance	Remediation Guidance of Attack Surface Rule.

Outputs

There are no outputs for this script.

Source

GenerateASMReport.py GenerateASMReport_test.py GenerateASMReport.yml

Download History Raw

args:
- description: Numerical ID of the ASM alert.
  name: alert_id
- description: Name of the alert that triggered this playbook.
  name: alert_name
- description: Details of the alert that triggered this playbook.
  name: alert_details
- description: ASM alert severity string.
  name: alert_severityStr
- description: Potential service owners gathered through the playbook.
  isArray: true
  name: asm_service_owner
- description: Collect information on remediation action(s).
  isArray: true
  name: asm_remediation
- description: Pre/Post remediation scan to check if the service is still detectable.
  isArray: true
  name: asm_service_detection
- description: Related system identifiers.
  isArray: true
  name: asm_system_ids
- description: Information on cloud assets.
  isArray: true
  name: asm_cloud
- description: Information on notification(s) sent via the ASM playbook.
  isArray: true
  name: asm_notification
- description: Collect information on data collection tasks.
  isArray: true
  name: asm_data_collection
- description: Tags from objects that can be used to determine other information (if server is Dev for example).
  isArray: true
  name: asm_tags
- description: Private IP addresses found.
  isArray: true
  name: asm_private_ip
- description: Related or duplicate objects.
  isArray: true
  name: asm_related
- description: Matched remediation path rule (if there is a match).
  isArray: true
  name: asm_remediation_path_rule
- description: External Service ID for generating Service Summary.
  name: asm_service_id
- description: Asset ID related to alert.
  name: asm_asset_id
- name: report_type
  auto: PREDEFINED
  predefined:
  - analysis
  - summary
  description: Type of report to generate (Analysis report after enrichment or Summary).
  defaultValue: summary
- description: Remediation Guidance of Attack Surface Rule.
  name: asm_remediation_guidance

comment: Generate an ASM Alert Summary report.
commonfields:
  id: GenerateASMReport
  version: -1
dockerimage: demisto/python3:3.12.13.10116658
enabled: true
name: GenerateASMReport
runas: DBotWeakRole
runonce: false
script: ''
scripttarget: 0
subtype: python3
tags: []
type: python
fromversion: 6.5.0
tests:
- No tests (auto formatted)
engineinfo: {}