Skip to main content

Code42 Suspicious Activity Action v2

This Playbook is part of the Code42 Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.10.0 and later.

Take corrective actions against a Code42 user found to be exposing file data.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • Code42


This playbook does not use any scripts.


  • code42-legalhold-add-user
  • code42-watchlists-add-user
  • code42-user-block

Playbook Inputs#

NameDescriptionDefault ValueRequired
actionThe comma-separated list of remediation actions to take on the user.Required
usernameEmail id of the employee on whom action is to be takenRequired
matternameThe name of the legal hold matter.Optional

Playbook Outputs#

There are no outputs for this playbook.

Playbook Image#

Code42 Suspicious Activity Action