Supported Cortex XSOAR versions: 5.5.0 and later.
Sends a message via Slack to the user whose file upload violated DLP policies and triggered the incident.
|Cortex XSOAR Version
This script uses the following commands and scripts.
This script is used in the following playbooks and scripts.
- DLP Incident Feedback Loop
|The messenger to use for sending notification,
|The name of the file that triggered the incident.
|The name of the DLP data profile that detected the violation.
|The application that performed the upload.
|A manual task that this task can close.
|The user name displayed in the Slack message.
|The user ID to identify the recipient in Slack.
|The snippets of the violation.
|Whether to include violation details in the message.
|Whether to ask the user about the file content or about exemption.
There are no outputs for this script.