RubrikSetIncidentSeverityUsingWorkLoadRiskLevel

Script used to set the XSOAR incident severity using the workload data provided from the argument.

python · Rubrik Security Cloud

Details

IDRubrikSetIncidentSeverityUsingWorkLoadRiskLevel
Languagepython
From Version6.5.0
Docker Imagedemisto/python3:3.12.13.10116658

README

Script used to set the XSOAR incident severity using the workload data provided from the argument.

Script Data

Name Description
Script Type python3
Cortex XSOAR Version 6.5.0

Inputs

Argument Name Description
risk_levels Specify the risk level values. Supports comma separated values.

Supported values are: High, Medium, Low, No Risk.
anomaly_severities Specify the anomaly severity values. Supports comma separated values.

Supported values are: Critical, Warning, Informational.
threat_hunt_malicious Specify the malicious threat hunt values. Supports comma separated values.

Supported values are: Matches Found, No Matches Found.
threat_monitoring_malicious Specify the malicious threat monitoring values. Supports comma separated values.

Supported values are: Matches Found, No Matches Found.
increase_severity_by Specify the level in number by which to increase the XSOAR incident severity. Only applicable if match found for the malicious threat hunt or for the malicious threat monitoring of workload.

Note: The value can range from 1 to 4.

Example: If the current XSOAR incident severity is 1 (Low) and the script is set to increase the severity by 2, the XSOAR incident severity will be set to 3 (high).

Outputs

There are no outputs for this script.

Source

RubrikSetIncidentSeverityUsingWorkLoadRiskLevel.py RubrikSetIncidentSeverityUsingWorkLoadRiskLevel_test.py RubrikSetIncidentSeverityUsingWorkLoadRiskLevel.yml
Download History Raw 
args:
- description: "Specify the risk level values. Supports comma separated values.\n\nSupported values are: High, Medium, Low, No Risk."
  name: risk_levels
  auto: PREDEFINED
  predefined:
  - High
  - Medium
  - Low
  - No Risk
  isArray: true
- description: "Specify the anomaly severity values. Supports comma separated values.\n\nSupported values are: Critical, Warning, Informational."
  name: anomaly_severities
  auto: PREDEFINED
  predefined:
  - Critical
  - Warning
  - Informational
  isArray: true
- description: "Specify the malicious threat hunt values. Supports comma separated values.\n\nSupported values are: Matches Found, No Matches Found."
  name: threat_hunt_malicious
  auto: PREDEFINED
  predefined:
  - Matches Found
  - No Matches Found
  isArray: true
- description: "Specify the malicious threat monitoring values. Supports comma separated values.\n\nSupported values are: Matches Found, No Matches Found."
  name: threat_monitoring_malicious
  auto: PREDEFINED
  predefined:
  - Matches Found
  - No Matches Found
  isArray: true
- description: "Specify the level in number by which to increase the XSOAR incident severity. Only applicable if match found for the malicious threat hunt or for the malicious threat monitoring of workload.\n\nNote: The value can range from 1 to 4.\n\nExample: If the current XSOAR incident severity is 1 (Low) and the script is set to increase the severity by 2, the XSOAR incident severity will be set to 3 (high)."
  name: increase_severity_by
  defaultValue: "1"
comment: 'Script used to set the XSOAR incident severity using the workload data provided from the argument.'
commonfields:
  id: RubrikSetIncidentSeverityUsingWorkLoadRiskLevel
  version: -1
enabled: false
name: RubrikSetIncidentSeverityUsingWorkLoadRiskLevel
script: '-'
system: false
timeout: '0'
type: python
subtype: python3
dockerimage: demisto/python3:3.12.13.10116658
fromversion: 6.5.0
marketplaces:
- xsoar
- marketplacev2
- platform
tests:
- No tests (auto formatted)