SafeBreach - Compare and Validate Insight Indicators

This playbook compares SafeBreach Insight indicators before and after the processing. It receives an insight and it's indicators before validation, fetches updated indicators after rerunning the insight, and then compares the results to validate mitigation. Indicators are classified as Remediated or Not Remediated based on their validated status and the appropriate field (SafeBreach Remediation Status) is updated.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • SafeBreach_v2


  • ChangeContext
  • SetAndHandleEmpty
  • Set


  • setIndicator
  • safebreach-get-remediation-data

Playbook Inputs

NameDescriptionDefault ValueRequired
IndicatorsBeforeIndicator values extracted from a SafeBreach Insight before remediation.Required
InsightSafeBreach insight object to verify the remediation for.Required

Playbook Outputs

RemediatedIndicatorsList of indicators that were remediatedArray
NotRemediatedIndicatorsList of indicators that were not remediatedArray

Playbook Image

SafeBreach - Compare and Validate Insight Indicators