id: Calculate Severity - Standard
version: -1
name: Calculate Severity - Standard
description: Calculates and sets the incident severity based on the combination of the current incident severity, and the severity returned from the Calculate Severity By Highest DBotScore playbook.
fromversion: 5.0.0
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: 39518188-8725-4c70-8f80-3a9a4554deb2
    type: start
    task:
      id: 39518188-8725-4c70-8f80-3a9a4554deb2
      version: -1
      name: ""
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "16"
      - "20"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 910,
          "y": 50
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    continueonerrortype: ""
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "4":
    id: "4"
    taskid: d750bb71-4ef5-4de1-88ec-02d5035a0177
    type: regular
    task:
      id: d750bb71-4ef5-4de1-88ec-02d5035a0177
      version: -1
      name: Set incident severity to "Low"
      description: Sets the severity of the incident to "Low".
      script: Builtin|||setIncident
      type: regular
      iscommand: true
      brand: Builtin
    nexttasks:
      '#none#':
      - "10"
    scriptarguments:
      severity:
        simple: low
    reputationcalc: 1
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 175,
          "y": 570
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    continueonerrortype: ""
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "5":
    id: "5"
    taskid: 9c7487d4-53f2-4645-8f7b-2653d6c76676
    type: regular
    task:
      id: 9c7487d4-53f2-4645-8f7b-2653d6c76676
      version: -1
      name: Set incident severity to "Medium"
      description: Sets the severity of the incident to "Medium".
      script: Builtin|||setIncident
      type: regular
      iscommand: true
      brand: Builtin
    nexttasks:
      '#none#':
      - "10"
    scriptarguments:
      severity:
        simple: medium
    reputationcalc: 1
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 580,
          "y": 570
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    continueonerrortype: ""
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "6":
    id: "6"
    taskid: 77f20a17-499a-4ed3-85ad-a24e697b4792
    type: regular
    task:
      id: 77f20a17-499a-4ed3-85ad-a24e697b4792
      version: -1
      name: Set incident severity to "High"
      description: Sets the severity of the incident to "High".
      script: Builtin|||setIncident
      type: regular
      iscommand: true
      brand: Builtin
    nexttasks:
      '#none#':
      - "10"
    scriptarguments:
      severity:
        simple: high
    reputationcalc: 1
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 1243,
          "y": 570
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    continueonerrortype: ""
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "10":
    id: "10"
    taskid: 84feda52-060b-4e27-89ef-05553ca57636
    type: title
    task:
      id: 84feda52-060b-4e27-89ef-05553ca57636
      version: -1
      name: Done
      type: title
      iscommand: false
      brand: ""
      description: ''
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 910,
          "y": 900
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    continueonerrortype: ""
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "11":
    id: "11"
    taskid: ffcb1963-a04f-4f3b-8ff8-37e6829ac96c
    type: regular
    task:
      id: ffcb1963-a04f-4f3b-8ff8-37e6829ac96c
      version: -1
      name: Set incident severity to "Critical"
      description: Sets the severity of the incident to "Critical".
      script: Builtin|||setIncident
      type: regular
      iscommand: true
      brand: Builtin
    nexttasks:
      '#none#':
      - "10"
    scriptarguments:
      severity:
        simple: critical
    reputationcalc: 1
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 1650,
          "y": 570
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    continueonerrortype: ""
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "15":
    id: "15"
    taskid: 14b9554d-23ca-4e85-86f8-51f290b2a18d
    type: condition
    task:
      id: 14b9554d-23ca-4e85-86f8-51f290b2a18d
      version: -1
      name: Set severity based on the highest severity
      description: Determines and sets the incident severity based on the highest result of all severity calculations.
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "19"
      Critical:
      - "11"
      High:
      - "6"
      Low:
      - "4"
      Medium:
      - "5"
    separatecontext: false
    conditions:
    - label: Critical
      condition:
      - - operator: isExists
          left:
            value:
              complex:
                root: Severities
                filters:
                - - operator: isEqualNumber
                    left:
                      value:
                        simple: Severities.IncidentSeverity
                      iscontext: true
                    right:
                      value:
                        simple: "4"
                    ignorecase: true
                  - operator: isEqualString
                    left:
                      value:
                        simple: Severities.DBotScoreSeverity
                      iscontext: true
                    right:
                      value:
                        simple: critical
                    ignorecase: true
            iscontext: true
    - label: High
      condition:
      - - operator: isExists
          left:
            value:
              complex:
                root: Severities
                filters:
                - - operator: isEqualNumber
                    left:
                      value:
                        simple: Severities.IncidentSeverity
                      iscontext: true
                    right:
                      value:
                        simple: "3"
                    ignorecase: true
                  - operator: isEqualString
                    left:
                      value:
                        simple: Severities.DBotScoreSeverity
                      iscontext: true
                    right:
                      value:
                        simple: high
                    ignorecase: true
            iscontext: true
    - label: Medium
      condition:
      - - operator: isExists
          left:
            value:
              complex:
                root: Severities
                filters:
                - - operator: isEqualNumber
                    left:
                      value:
                        simple: Severities.IncidentSeverity
                      iscontext: true
                    right:
                      value:
                        simple: "2"
                    ignorecase: true
                  - operator: isEqualString
                    left:
                      value:
                        simple: Severities.DBotScoreSeverity
                      iscontext: true
                    right:
                      value:
                        simple: medium
                    ignorecase: true
            iscontext: true
          ignorecase: true
    - label: Low
      condition:
      - - operator: isExists
          left:
            value:
              complex:
                root: Severities
                filters:
                - - operator: isEqualNumber
                    left:
                      value:
                        simple: Severities.IncidentSeverity
                      iscontext: true
                    right:
                      value:
                        simple: "1"
                    ignorecase: true
                  - operator: isEqualString
                    left:
                      value:
                        simple: Severities.DBotScoreSeverity
                      iscontext: true
                    right:
                      value:
                        simple: low
                    ignorecase: true
            iscontext: true
    view: |-
      {
        "position": {
          "x": 910,
          "y": 370
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    continueonerrortype: ""
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "16":
    id: "16"
    taskid: dd9d54b5-409c-4bd2-82d3-62785b06c406
    type: regular
    task:
      id: dd9d54b5-409c-4bd2-82d3-62785b06c406
      version: -1
      name: Get incident severity
      description: Saves the incident severity in context.
      scriptName: Set
      type: regular
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "15"
    scriptarguments:
      append:
        simple: "true"
      key:
        simple: Severities.IncidentSeverity
      value:
        complex:
          root: incident
          accessor: severity
    reputationcalc: 1
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 1210,
          "y": 195
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    continueonerrortype: ""
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "19":
    id: "19"
    taskid: c78dbddd-05c3-4810-8b62-9a0f5958dc73
    type: regular
    task:
      id: c78dbddd-05c3-4810-8b62-9a0f5958dc73
      version: -1
      name: Set incident severity to "Unknown"
      description: Sets the incident severity to "Unknown".
      script: Builtin|||setIncident
      type: regular
      iscommand: true
      brand: Builtin
    nexttasks:
      '#none#':
      - "10"
    scriptarguments:
      severity:
        simple: unknown
    reputationcalc: 1
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 910,
          "y": 690
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    continueonerrortype: ""
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "20":
    id: "20"
    taskid: 0488f795-a0de-432a-848e-ccc213a40e15
    type: playbook
    task:
      id: 0488f795-a0de-432a-848e-ccc213a40e15
      version: -1
      name: Calculate Severity By Highest DBotScore
      description: Calculates the incident severity level according to the highest DBotScore.
      playbookName: Calculate Severity By Highest DBotScore
      type: playbook
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "15"
    scriptarguments:
      DBotScoreIndicators:
        complex:
          root: inputs.DBotScoreIndicators
          transformers:
          - operator: uniq
      DBotScoreMaxScore:
        complex:
          root: inputs.DBotScoreMaxScore
          transformers:
          - operator: sort
            args:
              descending:
                value:
                  simple: "true"
          - operator: uniq
          - operator: FirstArrayElement
    separatecontext: true
    continueonerrortype: ""
    loop:
      iscommand: false
      exitCondition: ""
      wait: 1
      max: 100
    view: |-
      {
        "position": {
          "x": 610,
          "y": 195
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
view: |-
  {
    "linkLabelsPosition": {
      "15_11_Critical": 0.84,
      "15_19_#default#": 0.5,
      "15_4_Low": 0.85
    },
    "paper": {
      "dimensions": {
        "height": 915,
        "width": 1855,
        "x": 175,
        "y": 50
      }
    }
  }
inputs:
- key: DBotScoreIndicators
  value:
    complex:
      root: DBotScore
      accessor: Indicator
      transformers:
      - operator: uniq
  required: false
  description: A list of DBotScore indicator values.
  playbookInputQuery:
- key: DBotScoreMaxScore
  value:
    complex:
      root: DBotScore
      accessor: Score
      transformers:
      - operator: sort
        args:
          descending:
            value:
              simple: "true"
      - operator: uniq
      - operator: FirstArrayElement
  required: false
  description: The highest score (number) that was given to a DBotScore indicator.
  playbookInputQuery:
outputs: []
tests:
- Calculate Severity - Standard - Test
contentitemexportablefields:
  contentitemfields: {}