device-security-get-raci
Calculates the responsible and informed parties for a Device Security incident by matching incident and device details against the Device Security configuration list.
Details
| ID | device-security-get-raci |
|---|---|
| Language | python |
| From Version | 6.10.0 |
| Docker Image | demisto/python3:3.12.13.10404775 |
| Tags | device security |
README
Calculates the responsible and informed parties for a Device Security incident by matching incident and device details against the Device Security configuration list.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | device security |
| Cortex XSOAR Version | 6.10.0 |
Used In
This script is used in the following playbooks and scripts.
- PANW Device Security Incident Handling with ServiceNow
Inputs
| Argument Name | Description |
|---|---|
| incident_name | The name of the Device Security incident. |
| raw_type | The raw type of the incident. |
| category | The device category. |
| profile | The device profile. |
| vendor | The device vendor. |
| model | The device model. |
| device_security_config_list_name | The name of the list containing the Device Security configuration. |
Outputs
| Path | Description | Type |
|---|---|---|
| PaloAltoNetworksDeviceSecurity.RACI.Model | The RACI model of the Device Security incident. | object |
| PaloAltoNetworksDeviceSecurity.RACI.Model.r | The responsible party in the RACI model. | string |
| PaloAltoNetworksDeviceSecurity.RACI.Model.r_email | The email address of the responsible party in the RACI model. | string |
| PaloAltoNetworksDeviceSecurity.RACI.Model.i | The informed parties in the RACI model. | string |
| PaloAltoNetworksDeviceSecurity.RACI.Model.i_email | The comma-separated email addresses of the informed parties in the RACI model. | string |
| PaloAltoNetworksDeviceSecurity.RACI.Model.owner | The Device Security owner of the device. | string |
| PaloAltoNetworksDeviceSecurity.RACI.Model.r_snow | The ServiceNow information for the responsible party. | object |
| PaloAltoNetworksDeviceSecurity.RACI.Model.r_snow.fields | The fields of the ServiceNow ticket. | string |
| PaloAltoNetworksDeviceSecurity.RACI.Model.r_snow.custom_fields | The custom fields of the ServiceNow ticket. | string |
| PaloAltoNetworksDeviceSecurity.RACI.Model.r_snow.table | The table of the ServiceNow ticket. | string |
args: - description: The name of the Device Security incident. name: incident_name - description: The raw type of the incident. name: raw_type required: true - description: The device category. name: category - description: The device profile. name: profile - description: The device vendor. name: vendor - description: The device model. name: model - description: The name of the list containing the Device Security configuration. name: device_security_config_list_name defaultValue: DEVICE_SECURITY_CONFIG comment: Calculates the responsible and informed parties for a Device Security incident by matching incident and device details against the Device Security configuration list. commonfields: id: device-security-get-raci version: -1 name: device-security-get-raci outputs: - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model description: The RACI model of the Device Security incident. type: object - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model.r description: The responsible party in the RACI model. type: string - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model.r_email description: The email address of the responsible party in the RACI model. type: string - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model.i description: The informed parties in the RACI model. type: string - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model.i_email description: The comma-separated email addresses of the informed parties in the RACI model. type: string - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model.owner description: The Device Security owner of the device. type: string - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model.r_snow description: The ServiceNow information for the responsible party. type: object - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model.r_snow.fields description: The fields of the ServiceNow ticket. type: string - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model.r_snow.custom_fields description: The custom fields of the ServiceNow ticket. type: string - contextPath: PaloAltoNetworksDeviceSecurity.RACI.Model.r_snow.table description: The table of the ServiceNow ticket. type: string script: '-' tags: - device security timeout: '0' type: python subtype: python3 dockerimage: demisto/python3:3.12.13.10404775 fromversion: 6.10.0 tests: - No tests (auto formatted)