Skip to main content

Cortex ASM - Decision

This Playbook is part of the Cortex Attack Surface Management Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.5.0 and later.

This playbook returns "RemediationAction" options based on meeting "Automated Remediation Requirements" ( as well as whether ServiceNowV2 integration is set up. Possible return values are:

  • Prompt base - data collection task with only email/manual options.
  • Prompt all options - data collection task with all options (meets Automated Remediation requirements and ServiceNow is enabled).
  • Prompt no snow - all options except ServiceNow (Automated Remediation requirements are met).
  • Prompt no ar - all options except Automated Remediation (ServiceNow is enabled).


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


This playbook does not use any integrations.




This playbook does not use any commands.

Playbook Inputs#

NameDescriptionDefault ValueRequired
ServiceNowv2EnabledServiceNow v2 integration enabled.Required
AutoRemediationRequirementsMeets automated remediation requirements (\#automated-remediation-requirements\).Required

Playbook Outputs#

RemediationActionFollow up action to perform (variety of data collection tasks).string

Playbook Image#

Cortex ASM - Decision