Skip to main content

Get Code42 Employee Information

This Playbook is part of the Code42 Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.8.0 and later.

Receives usernames from a Code42 Incydr alert and queries Active Directory for employee and supervisor information, if applicable.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • Active Directory Query v2


This playbook does not use any scripts.


  • ad-get-user
  • setIncident

Playbook Inputs#

NameDescriptionDefault ValueRequired
userThe username to query in Active Directory.Required
incidentidThe Palo Alto XSOAR incident ID that receives the employee information (optional).Optional

Playbook Outputs#

Account.DisplayNameThe display name of the user.string
Account.ManagerThe manager of the user.string
Account.UsernameThe samAccountName of the user.string
Account.EmailThe email address of the user.string
Account.departmentThe Department of the user.string

Playbook Image#

Get Code42 Employee Information