Skip to main content

RubrikSetIncidentSeverityUsingWorkLoadRiskLevel

This Script is part of the Rubrik Security Cloud Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.5.0 and later.

Script used to set the XSOAR incident severity using the workload data provided from the argument.

Script Data#


NameDescription
Script Typepython3
Cortex XSOAR Version6.5.0

Inputs#


Argument NameDescription
risk_levelsSpecify the risk level values. Supports comma separated values.

Supported values are: High, Medium, Low, No Risk.
anomaly_severitiesSpecify the anomaly severity values. Supports comma separated values.

Supported values are: Critical, Warning, Informational.
threat_hunt_maliciousSpecify the malicious threat hunt values. Supports comma separated values.

Supported values are: Matches Found, No Matches Found.
threat_monitoring_maliciousSpecify the malicious threat monitoring values. Supports comma separated values.

Supported values are: Matches Found, No Matches Found.
increase_severity_bySpecify the level in number by which to increase the XSOAR incident severity. Only applicable if match found for the malicious threat hunt or for the malicious threat monitoring of workload.

Note: The value can range from 1 to 4.

Example: If the current XSOAR incident severity is 1 (Low) and the script is set to increase the severity by 2, the XSOAR incident severity will be set to 3 (high).

Outputs#


There are no outputs for this script.