Cortex ASM - Remediation Path Rules
This Playbook is part of the Cortex Attack Surface Management Pack.#
Supported versions
Supported Cortex XSOAR versions: 6.9.0 and later.
This playbook returns "RemediationAction" options based on the return from the Remediation Path Rules API, or defaults to data collection task.
Dependencies#
This playbook uses the following sub-playbooks, integrations, and scripts.
Sub-playbooks#
- Cortex ASM - Remediation Objectives
Integrations#
- CortexAttackSurfaceManagement
Scripts#
- RemediationPathRuleEvaluation
- GetTime
- Set
- GridFieldSetup
Commands#
- asm-list-remediation-rule
Playbook Inputs#
| Name | Description | Default Value | Required |
|---|---|---|---|
| ExternallyDetectedProviders | Providers of external service. | Optional | |
| BypassDevCheck | Determine whether to bypass the Dev Check in automated remediation criteria: https://docs-cortex.paloaltonetworks.com/r/Cortex-XPANSE/Cortex-Xpanse-Expander-User-Guide/Automated-Remediation-Capabilities-Matrix Set to "True" if you want to bypass. " | False | Optional |
Playbook Outputs#
| Path | Description | Type |
|---|---|---|
| RemediationAction | Remediation action to be taken. | string |
| RPR_Timestamp | Timestamp of when the remediation path rule action was determined. | string |
Playbook Image#
