diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/definition.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/definition.yaml new file mode 100644 index 0000000000..dda37debf6 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/definition.yaml @@ -0,0 +1,27 @@ +identifier: b537cafe-9fcf-4659-9b90-227f4315b7d1 +is_enable: true +version: 0.0 +name: Wiz - List Resource Vulnerability Findings +description: 'Retrieve all vulnerability findings associated with a specified Wiz + resource, analyze the risk and remediation details, and provide a structured view + for analyst investigation and patch prioritization. ' +debug_alert_identifier: '' +debug_base_alert_identifier: '' +is_debug_mode: false +type: block +template_name: null +original_workflow_identifier: eb684fa0-61d0-4d64-a704-09f1363d5347 +version_comment: null +version_creator: null +creator: d568db8f-d0ec-42fb-af6c-6d2d2906520c +priority: 2 +category: 243 +is_automatic: true +is_archived: false +last_editor: null +default_access_level: edit +creation_source: user_or_api_initiated +simulation_clone: false +permissions: [] +environments: +- '*' diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/display_info.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/display_info.yaml new file mode 100644 index 0000000000..4b921dd966 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/display_info.yaml @@ -0,0 +1,8 @@ +type: block +content_hub_display_name: 'Wiz - List Resource Vulnerability Findings' +author: 'Accenture' +contact_email: '' # In case support is needed, this email will be used by secops customers to open support queries (required for partner contributed content) +tags: ['WIZ', 'Vulnerabilities', 'Enrichment'] +should_display_in_content_hub: true +contribution_type: third_party # Options: google, partner, or third_party +acknowledge_debug_data_included: true diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/overviews.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/overviews.yaml new file mode 100644 index 0000000000..60b0742537 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/overviews.yaml @@ -0,0 +1 @@ +[] diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/release_notes.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/release_notes.yaml new file mode 100644 index 0000000000..d21e3f196f --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/release_notes.yaml @@ -0,0 +1,9 @@ +- description: Initial release of Wiz - List Resource Vulnerability Findings + integration_version: 1.0 + item_name: Wiz - List Resource Vulnerability Findings + item_type: Block + publish_time: '2026-08-31' + new: true + regressive: false + deprecated: false + removed: false diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/append_list_resource_vulnerability_findings_de087.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/append_list_resource_vulnerability_findings_de087.yaml new file mode 100644 index 0000000000..ec5bfd1e48 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/append_list_resource_vulnerability_findings_de087.yaml @@ -0,0 +1,83 @@ +name: Tools_Append to Context Value +description: Appends retrieved vulnerability findings to the aggregated findings context + variable. +identifier: de0877ab-9202-47b0-abb7-098877419d12 +original_step_id: 4eed140d-e4d1-42d7-a4b3-ab976791993a +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef +parent_step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef +instance_name: Append List Resource Vulnerability Findings +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parameters: +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: 'false' +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 4b41988d-9fb1-4a11-b3e5-18f17c87bc84 +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Tools_Append to Context Value +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Scope":"Alert","Key":"vulnerability_findings","Value":"[List Resource + Vulnerability Findings.JsonResult| \"EntityResult\"]","Delimiter":","}' +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: de0877ab-9202-47b0-abb7-098877419d12 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: 'true' +action_name: Tools_Append to Context Value +parallel_actions: [] +integration: Tools +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: "{\n \"cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef\": \"1\"\n\ + }" +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/display_vulnerability_findings_summary_result_afef6.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/display_vulnerability_findings_summary_result_afef6.yaml new file mode 100644 index 0000000000..a9e9f8d12e --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/display_vulnerability_findings_summary_result_afef6.yaml @@ -0,0 +1,87 @@ +name: Siemplify_Case Comment +description: Posts the formatted vulnerability findings summary as a case comment. +identifier: afef6453-7dd4-49dd-803a-741fd164e387 +original_step_id: 81364c8b-2377-41b1-bc0b-8d6218a612ff +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 +parent_step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 +instance_name: Display Vulnerability Findings Summary Result +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: null +parameters: +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Case Comment +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Comment":"[Alert.vulnerability_findings_result]"}' +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: afef6453-7dd4-49dd-803a-741fd164e387 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null +action_name: Siemplify_Case Comment +parallel_actions: [] +integration: Siemplify +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: + step_id: 81364c8b-2377-41b1-bc0b-8d6218a612ff + playbook_id: eb684fa0-61d0-4d64-a704-09f1363d5347 + creation_time: 0 + modification_time: 0 + result_value: '' + result_json: '' + scope_entities_enrichment_data: [] +auto_skip_on_failure: false +previous_result_condition: '{}' +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/false_append_evaluation_50f03.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/false_append_evaluation_50f03.yaml new file mode 100644 index 0000000000..aef3b6c407 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/false_append_evaluation_50f03.yaml @@ -0,0 +1,80 @@ +name: Tools_Append to Context Value +description: Records a failed retrieval result for the current resource. +identifier: 50f03571-9a2e-4c75-87b7-6f1561423b31 +original_step_id: 638aaa49-9406-4023-b504-01e95ca8d046 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- af57b1f6-8b83-4da5-85f7-668e13d08fd7 +parent_step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 +instance_name: 'False: Append Evaluation' +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parameters: +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: 'false' +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 4b41988d-9fb1-4a11-b3e5-18f17c87bc84 +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Tools_Append to Context Value +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Scope":"Alert","Key":"list_resource_vulnerability_findings_evaluation","Value":"FALSE","Delimiter":","}' +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: 50f03571-9a2e-4c75-87b7-6f1561423b31 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: 'true' +action_name: Tools_Append to Context Value +parallel_actions: [] +integration: Tools +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_name_end_d871d.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_name_end_d871d.yaml new file mode 100644 index 0000000000..bbf553ad33 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_name_end_d871d.yaml @@ -0,0 +1,25 @@ +name: For Each Loop +description: This returns the results of the loop +identifier: d871d1ef-be59-4bcb-8c1a-9cf71802052a +original_step_id: 0c3daf15-51b6-42e1-823e-ac2b2c56e8e3 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- 68dd8797-419b-444d-baac-d53b8952cc69 +- 50f03571-9a2e-4c75-87b7-6f1561423b31 +parent_step_id: 68dd8797-419b-444d-baac-d53b8952cc69;50f03571-9a2e-4c75-87b7-6f1561423b31 +instance_name: List Resource Name_End +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parameters: [] +action_name: ForEachEndLoop +parallel_actions: [] +integration: Loop +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: for_each_end_loop diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_name_start_9e417.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_name_start_9e417.yaml new file mode 100644 index 0000000000..30e1cc0cbe --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_name_start_9e417.yaml @@ -0,0 +1,65 @@ +name: For Each Loop +description: Starts a For Each loop iterating over each resource name in the comma-delimited + input list. +identifier: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +original_step_id: b70b4dd5-2c3d-4027-92f7-2e1a7e93f7b0 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- 121a9c10-31a2-40ed-92f3-0ae059e62587 +parent_step_id: 121a9c10-31a2-40ed-92f3-0ae059e62587 +instance_name: List Resource Name_Start +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parameters: +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: 'true' +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: EndLoopStepIdentifier + value: d871d1ef-be59-4bcb-8c1a-9cf71802052a +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ListLoopDelimiter + value: ',' +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ListLoopItems + value: '[Input.Resource Name (Required)]' +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: LoopType + value: '3' +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: null +action_name: ForEachStartLoop +parallel_actions: [] +integration: Loop +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: for_each_start_loop diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_vulnerability_findings_b2b6f.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_vulnerability_findings_b2b6f.yaml new file mode 100644 index 0000000000..19278a88ff --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_vulnerability_findings_b2b6f.yaml @@ -0,0 +1,92 @@ +name: Wiz_List Resource Vulnerability Findings +description: 'Use the List Resource Vulnerability Findings action to retrieve a list + of vulnerability findings associated with a specific resource in Wiz. Note: action + will only return findings associated with projects to which the API key has access + to.' +identifier: b2b6f367-3745-4633-9d26-097eb917cc1f +original_step_id: 187d9269-7ee3-4982-91d5-0767174a748c +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- fc89f516-a6c6-4f57-b599-1a3cf386486a +parent_step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a +instance_name: List Resource Vulnerability Findings +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parameters: +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: 'false' +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 68a8a6ac-d50b-4487-9250-97d29c7adc95 +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Wiz_List Resource Vulnerability Findings +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Resource Name":"[Loop.Item]","Severity":["All"],"Has Fix":"Select One","Has + Public Exploit":"Select One","CVE IDs":"[Input.CVE IDs (Optional)]","Max Findings + To Return":"[Input.Max Findings To Return (Optional)]\n"}' +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: b2b6f367-3745-4633-9d26-097eb917cc1f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: 'true' +action_name: Wiz_List Resource Vulnerability Findings +parallel_actions: [] +integration: Wiz +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: + step_id: 187d9269-7ee3-4982-91d5-0767174a748c + playbook_id: eb684fa0-61d0-4d64-a704-09f1363d5347 + creation_time: 0 + modification_time: 0 + result_value: '' + result_json: '' + scope_entities_enrichment_data: [] +auto_skip_on_failure: false +previous_result_condition: '{}' +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_vulnerability_findings_successful_cb5cd.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_vulnerability_findings_successful_cb5cd.yaml new file mode 100644 index 0000000000..c793993c38 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_resource_vulnerability_findings_successful_cb5cd.yaml @@ -0,0 +1,63 @@ +name: Condition +description: Evaluates whether the Wiz action successfully returned findings for the + resource +identifier: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef +original_step_id: dbf24bda-c48b-4e51-9291-f7dd19b063a2 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- b2b6f367-3745-4633-9d26-097eb917cc1f +parent_step_id: b2b6f367-3745-4633-9d26-097eb917cc1f +instance_name: List Resource Vulnerability Findings Successful? +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parameters: +- step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: Branches + value: '[{"LogicalOperator":0,"Conditions":[{"Operator":0,"FieldName":"[List Resource + Vulnerability Findings.is_success]","Type":7,"Value":"true","CustomOperatorName":"Core + Functions.Equal"}],"Order":1,"IsDefaultBranch":false,"Name":"Yes"},{"LogicalOperator":0,"Conditions":[],"Order":2,"IsDefaultBranch":true,"Name":"Branch"}]' +- step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: 'true' +- step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ErrorFallbackBranch + value: null +- step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: 'true' +action_name: IfFlowCondition +parallel_actions: [] +integration: Flow +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: condition diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_vulnerability_findings_0011d.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_vulnerability_findings_0011d.yaml new file mode 100644 index 0000000000..0829d87805 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/list_vulnerability_findings_0011d.yaml @@ -0,0 +1,82 @@ +name: Tools_Buffer +description: Converts the collected vulnerability findings into a structured JSON + object for further processing. +identifier: 0011d87a-557c-4d89-a391-7765dcdee5cf +original_step_id: a82bb243-a7a1-4c7e-a5ff-afa9c8d08cfb +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- d871d1ef-be59-4bcb-8c1a-9cf71802052a +parent_step_id: d871d1ef-be59-4bcb-8c1a-9cf71802052a +instance_name: List Vulnerability Findings +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: null +parameters: +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 4b41988d-9fb1-4a11-b3e5-18f17c87bc84 +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Tools_Buffer +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"ResultValue":"","JSON":"{\"Vulnerability Findings\": [[Alert.vulnerability_findings| + trimChars(\"-,\")]]}"}' +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null +action_name: Tools_Buffer +parallel_actions: [] +integration: Tools +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/loop_preparation_121a9.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/loop_preparation_121a9.yaml new file mode 100644 index 0000000000..c94deb1908 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/loop_preparation_121a9.yaml @@ -0,0 +1,194 @@ +name: Parallel Actions +description: '' +identifier: 121a9c10-31a2-40ed-92f3-0ae059e62587 +original_step_id: 62f940a8-6372-4416-9e69-d8494276aaf0 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- a9a08f8d-b631-42ee-9938-bd99b1d19fc2 +parent_step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 +instance_name: Loop Preparation +is_automatic: true +is_skippable: false +action_provider: ParallelActionsContainer +start_loop_step_id: null +parameters: [] +action_name: ParallelActionsContainer +parallel_actions: +- name: Siemplify_Set Scope Context Value + description: Initializes and prepares the context structure to store vulnerability + findings results ahead of the loop. + identifier: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + original_step_id: a5a9995d-6716-46ec-b8ba-0e398be07de3 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Prepare Resource Vulnerability Findings + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"vulnerability_findings","Key + Value":"-"}' + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: 4a79d297-30cc-44d6-b2f2-ef6e0a370faf + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 121a9c10-31a2-40ed-92f3-0ae059e62587 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: false + previous_result_condition: null + type: action +- name: Siemplify_Set Scope Context Value + description: Initializes and prepares the context structure to store vulnerability + findings evaluation ahead of the loop. + identifier: 03fc5eca-eecb-409d-a115-cf2324d1352c + original_step_id: b8282483-adcd-45e0-b30f-a8db56b0e719 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Prepare Resource Vulnerability Findings Evaluation + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"list_resource_vulnerability_findings_evaluation","Key + Value":"-"}' + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: 03fc5eca-eecb-409d-a115-cf2324d1352c + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 121a9c10-31a2-40ed-92f3-0ae059e62587 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: + step_id: b8282483-adcd-45e0-b30f-a8db56b0e719 + playbook_id: eb684fa0-61d0-4d64-a704-09f1363d5347 + creation_time: 0 + modification_time: 0 + result_value: '' + result_json: '' + scope_entities_enrichment_data: [] + auto_skip_on_failure: false + previous_result_condition: null + type: action +integration: null +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: "{\n \"a9a08f8d-b631-42ee-9938-bd99b1d19fc2\": \"1\"\n\ + }" +type: parallel_actions_container diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/no_resource_name_found_2bce6.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/no_resource_name_found_2bce6.yaml new file mode 100644 index 0000000000..57b8790e68 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/no_resource_name_found_2bce6.yaml @@ -0,0 +1,84 @@ +name: Siemplify_Case Comment +description: Posts a case comment indicating the vulnerability listing was unsuccessful, + noting possible reason for the failure. +identifier: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 +original_step_id: f1e08ac6-b26e-4eb1-913e-b9cf7e7cdb23 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- a9a08f8d-b631-42ee-9938-bd99b1d19fc2 +parent_step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 +instance_name: No Resource Name Found +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: null +parameters: +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Case Comment +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: "{\"Comment\":\"The List Resource Vulnerability Findings was not Successful.\\\ + n\\nPossible Reason:\\n\u2022 Resource Name is not provided or incorrect.\\\ + n\\nSolution:\\nProvide valid input and rerun the block.\"}" +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null +action_name: Siemplify_Case Comment +parallel_actions: [] +integration: Siemplify +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: "{\n \"a9a08f8d-b631-42ee-9938-bd99b1d19fc2\": \"2\"\n\ + }" +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_1_46dcc.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_1_46dcc.yaml new file mode 100644 index 0000000000..6fce727e69 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_1_46dcc.yaml @@ -0,0 +1,29 @@ +name: Output +description: '' +identifier: 46dcc41c-0b66-4842-bcfe-cad7932782f8 +original_step_id: 081775c8-b7bd-4398-8908-b28c109c84f6 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- d75e123b-1c47-468d-9869-fa7a024815ce +parent_step_id: d75e123b-1c47-468d-9869-fa7a024815ce +instance_name: Output_1 +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: null +parameters: +- step_id: 46dcc41c-0b66-4842-bcfe-cad7932782f8 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: NestedWorkflowOutput + value: ListResourceVulnerabilityFindingsSuccessfull = TRUE +action_name: OutputAction +parallel_actions: [] +integration: Flow +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: "{\n \"d75e123b-1c47-468d-9869-fa7a024815ce\": \"1\"\n\ + }" +type: output diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_2_a270e.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_2_a270e.yaml new file mode 100644 index 0000000000..2a08ed2f81 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_2_a270e.yaml @@ -0,0 +1,28 @@ +name: Output +description: '' +identifier: a270ed2f-cc12-4669-b701-db601e0db81f +original_step_id: 42156d8f-8ed7-4cb9-8214-025e3528ec29 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 +parent_step_id: 2bce68e3-da34-4a91-b1fc-a1c01e4f4bd7 +instance_name: Output_2 +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: null +parameters: +- step_id: a270ed2f-cc12-4669-b701-db601e0db81f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: NestedWorkflowOutput + value: ListResourceVulnerabilityFindingsSuccessfull = FALSE +action_name: OutputAction +parallel_actions: [] +integration: Flow +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: output diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_3_56af5.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_3_56af5.yaml new file mode 100644 index 0000000000..73b70d5ed2 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_3_56af5.yaml @@ -0,0 +1,29 @@ +name: Output +description: '' +identifier: 56af56e3-68e7-449b-9ea3-5099c7e5490b +original_step_id: c5e04566-d860-4a6f-9247-19ad2685d840 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- d75e123b-1c47-468d-9869-fa7a024815ce +parent_step_id: d75e123b-1c47-468d-9869-fa7a024815ce +instance_name: Output_3 +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: null +parameters: +- step_id: 56af56e3-68e7-449b-9ea3-5099c7e5490b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: NestedWorkflowOutput + value: ListResourceVulnerabilityFindingsSuccessfull = FALSE +action_name: OutputAction +parallel_actions: [] +integration: Flow +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: "{\n \"d75e123b-1c47-468d-9869-fa7a024815ce\": \"3\"\n\ + }" +type: output diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_4_ff7bf.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_4_ff7bf.yaml new file mode 100644 index 0000000000..8e96fa8b44 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/output_4_ff7bf.yaml @@ -0,0 +1,29 @@ +name: Output +description: '' +identifier: ff7bf76a-00c3-4928-9636-f1ccead18416 +original_step_id: 53e19d69-5e5e-4f62-b219-82119f2dd684 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- d75e123b-1c47-468d-9869-fa7a024815ce +parent_step_id: d75e123b-1c47-468d-9869-fa7a024815ce +instance_name: Output_4 +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: null +parameters: +- step_id: ff7bf76a-00c3-4928-9636-f1ccead18416 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: NestedWorkflowOutput + value: ListResourceVulnerabilityFindingsSuccessfull = PARTIAL +action_name: OutputAction +parallel_actions: [] +integration: Flow +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: "{\n \"d75e123b-1c47-468d-9869-fa7a024815ce\": \"2\"\n\ + }" +type: output diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/prepare_vulnerability_findings_details_fd2d6.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/prepare_vulnerability_findings_details_fd2d6.yaml new file mode 100644 index 0000000000..97b6391d1d --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/prepare_vulnerability_findings_details_fd2d6.yaml @@ -0,0 +1,350 @@ +name: TemplateEngine_Render Template +description: Generates a formatted HTML summary showing vulnerability statistics, + severity breakdown, and remediation details. +identifier: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 +original_step_id: aa457994-2f68-4933-8910-79e99cefc8ee +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- 1297fcf3-a1a0-4349-9f71-bb6f03f1e8a9 +parent_step_id: 1297fcf3-a1a0-4349-9f71-bb6f03f1e8a9 +instance_name: Prepare Vulnerability Findings Details +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: null +parameters: +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 03edb6fd-5733-4e02-abbb-4d54fc8b1dd1 +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: TemplateEngine_Render Template +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: "{\"JSON Object\":\"{}\",\"Jinja\":\"{% set _rn %}[Alert.resource_name]{%\ + \ endset %}{% set _rt %}[Alert.resource_type]{% endset %}{% set _ds %}[Alert.detection_status]{%\ + \ endset %}{% set _vi %}[Alert.vulnerability_id]{% endset %}{% set _vn %}[Alert.vulnerability_name]{%\ + \ endset %}{% set _vs %}[Alert.vulnerability_severity]{% endset %}{% set _sc\ + \ %}[Alert.vulnerability_score]{% endset %}{% set _ei %}[Alert.exploitability_information]{%\ + \ endset %}{% set _rr %}[Alert.remediation_recommendation]{% endset %}{% set\ + \ _fl %}[Alert.failed_list_resource_vulnerability_findings]{% endset %}\\\ + r\\n{%- set _rn=_rn|trim -%}{%- set _rt=_rt|trim -%}{%- set _ds=_ds|trim -%}{%-\ + \ set _vi=_vi|trim -%}{%- set _vn=_vn|trim -%}{%- set _vs=_vs|trim -%}{%-\ + \ set _sc=_sc|trim -%}{%- set _ei=_ei|trim -%}{%- set _rr=_rr|trim -%}{%-\ + \ set _fl=_fl|trim -%}\\r\\n{%- set rn_list=_rn.split(\\\",\\\") if _rn!=\\\ + \"\\\" else [] -%}{%- set rt_list=_rt.split(\\\",\\\") if _rt!=\\\"\\\" else\ + \ [] -%}{%- set ds_list=_ds.split(\\\",\\\") if _ds!=\\\"\\\" else [] -%}{%-\ + \ set vi_list=_vi.split(\\\",\\\") if _vi!=\\\"\\\" else [] -%}{%- set vn_list=_vn.split(\\\ + \",\\\") if _vn!=\\\"\\\" else [] -%}{%- set vs_list=_vs.split(\\\",\\\")\ + \ if _vs!=\\\"\\\" else [] -%}{%- set sc_list=_sc.split(\\\",\\\") if _sc!=\\\ + \"\\\" else [] -%}{%- set ei_list=_ei.split(\\\",\\\") if _ei!=\\\"\\\" else\ + \ [] -%}{%- set rr_list=_rr.split(\\\",\\\") if _rr!=\\\"\\\" else [] -%}{%-\ + \ set fl_list=_fl.split(\\\",\\\") if _fl!=\\\"\\\" else [] -%}\\r\\n{%- set\ + \ real_findings=[] -%}{%- for i in range(vn_list|length) -%}{%- set vname=vn_list[i]|trim\ + \ -%}{%- if vname!=\\\"\\\" and not vname.startswith(\\\"[Alert.\\\") -%}{%-\ + \ set _=real_findings.append(i) -%}{%- endif -%}{%- endfor -%}\\r\\n{%- set\ + \ finding_count=real_findings|length -%}\\r\\n{%- set uniq_resources=[] -%}{%-\ + \ for idx in real_findings -%}{%- set rname=(rn_list[idx]|trim) if rn_list|length>idx\ + \ else \\\"\\\" -%}{%- if rname==\\\"\\\" and uniq_resources|length>0 -%}{%-\ + \ set rname=uniq_resources[-1] -%}{%- endif -%}{%- if rname!=\\\"\\\" and\ + \ rname not in uniq_resources -%}{%- set _=uniq_resources.append(rname) -%}{%-\ + \ endif -%}{%- endfor -%}\\r\\n{%- set n_resources=uniq_resources|length -%}\\\ + r\\n{%- set clean_resources=[] -%}{%- for item in fl_list -%}{%- set cname=item|trim\ + \ -%}{%- if cname!=\\\"\\\" and not cname.startswith(\\\"[Alert.\\\") -%}{%-\ + \ set _=clean_resources.append(cname) -%}{%- endif -%}{%- endfor -%}\\r\\\ + n{%- set n_clean=clean_resources|length -%}\\r\\n{%- set tc=[] -%}{%- set\ + \ th=[] -%}{%- set to=[] -%}{%- set te=[] -%}{%- for idx in real_findings\ + \ -%}{%- set sev=vs_list[idx]|default(\\\"\\\")|trim|upper -%}{%- set stat=ds_list[idx]|default(\\\ + \"\\\")|trim|upper -%}{%- set expl=ei_list[idx]|default(\\\"\\\")|trim|upper\ + \ -%}{%- if sev==\\\"CRITICAL\\\" -%}{%- set _=tc.append(1) -%}{%- endif -%}{%-\ + \ if sev==\\\"HIGH\\\" -%}{%- set _=th.append(1) -%}{%- endif -%}{%- if stat==\\\ + \"OPEN\\\" -%}{%- set _=to.append(1) -%}{%- endif -%}{%- if expl==\\\"TRUE\\\ + \" or expl==\\\"YES\\\" -%}{%- set _=te.append(1) -%}{%- endif -%}{%- endfor\ + \ -%}\\r\\n{%- set n_crit=tc|length -%}{%- set n_high=th|length -%}{%- set\ + \ n_open=to|length -%}{%- set n_expl=te|length -%}\\r\\n{%- if n_crit>0 -%}{%-\ + \ set b_msg=\\\"IMMEDIATE ACTION REQUIRED \u2014 \\\"~n_crit~\\\" CRITICAL\ + \ VULNERABILIT\\\"~(\\\"Y\\\" if n_crit==1 else \\\"IES\\\") -%}{%- set b_bg=\\\ + \"#180404\\\" -%}{%- set b_bd=\\\"#5a1010\\\" -%}{%- set b_tx=\\\"#f87171\\\ + \" -%}{%- elif n_high>0 -%}{%- set b_msg=\\\"ATTENTION NEEDED \u2014 \\\"\ + ~n_high~\\\" HIGH-SEVERITY VULNERABILIT\\\"~(\\\"Y\\\" if n_high==1 else \\\ + \"IES\\\") -%}{%- set b_bg=\\\"#110c00\\\" -%}{%- set b_bd=\\\"#604800\\\"\ + \ -%}{%- set b_tx=\\\"#fcd34d\\\" -%}{%- elif finding_count>0 -%}{%- set b_msg=finding_count~\\\ + \" VULNERABILIT\\\"~(\\\"Y\\\" if finding_count==1 else \\\"IES\\\")~\\\"\ + \ DETECTED\\\" -%}{%- set b_bg=\\\"#0c1018\\\" -%}{%- set b_bd=\\\"#1a2a38\\\ + \" -%}{%- set b_tx=\\\"#93c5fd\\\" -%}{%- else -%}{%- set b_msg=\\\"\\\" -%}{%-\ + \ set b_bg=\\\"#0c1018\\\" -%}{%- set b_bd=\\\"#1a2a38\\\" -%}{%- set b_tx=\\\ + \"#93c5fd\\\" -%}{%- endif -%}\\r\\n
\\r\\n{%- if finding_count==0 and n_clean==0 -%}\\r\\n

No vulnerability findings to display.

\\r\\n{%- else -%}\\r\\n{%- if\ + \ finding_count==0 and n_clean>0 -%}\\r\\n

✓ ALL CLEAR \u2014 NO VULNERABILITIES DETECTED

{{ n_clean }} resource{{\ + \ \\\"s\\\" if n_clean!=1 else \\\"\\\" }} scanned — no findings to\ + \ remediate.

\\r\\n{%- else -%}\\r\\n

⚠ {{ b_msg }}

{{ n_expl }} exploitable • {{ n_open }} open • {{ finding_count\ + \ }} total{%- if n_open>0 %} — Remediate before next deployment{%- endif\ + \ %}.{%- if n_clean>0 %}  ✓ {{ n_clean }} resource{{ \\\"s\\\"\ + \ if n_clean!=1 else \\\"\\\" }} with no findings.{%- endif %}

\\\ + r\\n
Resources

{{ n_resources }}

With findings

Total

{{ finding_count }}

CVEs

0 else '#161b22' }};border:1px\ + \ solid {{ '#5a1010' if n_crit>0 else '#21262d' }};border-radius:5px;padding:7px\ + \ 8px;text-align:center;\\\">

0 else '#4a6880' }};margin:0 0 1px;text-transform:uppercase;letter-spacing:.06em;\\\ + \">Critical

0 else '#c9d1d9' }};margin:0;line-height:1.1;\\\">{{ n_crit }}

0 else '#4a6880' }};margin:1px\ + \ 0 0;\\\">Severity

0 else '#161b22' }};border:1px\ + \ solid {{ '#604800' if n_high>0 else '#21262d' }};border-radius:5px;padding:7px\ + \ 8px;text-align:center;\\\">

0 else '#4a6880' }};margin:0 0 1px;text-transform:uppercase;letter-spacing:.06em;\\\ + \">High

0 else '#c9d1d9' }};margin:0;line-height:1.1;\\\">{{ n_high }}

0 else '#4a6880' }};margin:1px\ + \ 0 0;\\\">Severity

0 else '#161b22' }};border:1px\ + \ solid {{ '#5a1010' if n_expl>0 else '#21262d' }};border-radius:5px;padding:7px\ + \ 8px;text-align:center;\\\">

0 else '#4a6880' }};margin:0 0 1px;text-transform:uppercase;letter-spacing:.06em;\\\ + \">Exploitable

0 else '#c9d1d9' }};margin:0;line-height:1.1;\\\">{{ n_expl }}

0 else '#4a6880' }};margin:1px\ + \ 0 0;\\\">Known exploit

0 else '#161b22' }};border:1px\ + \ solid {{ '#5a1010' if n_open>0 else '#21262d' }};border-radius:5px;padding:7px\ + \ 8px;text-align:center;\\\">

0 else '#4a6880' }};margin:0 0 1px;text-transform:uppercase;letter-spacing:.06em;\\\ + \">Open

0 else '#c9d1d9' }};margin:0;line-height:1.1;\\\">{{ n_open }}

0 else '#4a6880' }};margin:1px\ + \ 0 0;\\\">Unresolved

\\r\\n{%- for res in uniq_resources\ + \ -%}{%- set rce=[] -%}{%- set rc=[] -%}{%- set rhe=[] -%}{%- set rh=[] -%}{%-\ + \ set rme=[] -%}{%- set rm=[] -%}{%- set rle=[] -%}{%- set rl=[] -%}{%- set\ + \ ro_=[] -%}{%- set rcei=[] -%}{%- set rci=[] -%}{%- set rhei=[] -%}{%- set\ + \ rhi=[] -%}{%- set rmei=[] -%}{%- set rmi=[] -%}{%- set rlei=[] -%}{%- set\ + \ rli=[] -%}{%- set roi=[] -%}{%- for idx in real_findings -%}{%- set row_rn=(rn_list[idx]|trim)\ + \ if rn_list|length>idx else \\\"\\\" -%}{%- if row_rn==\\\"\\\" -%}{%- set\ + \ row_rn=res -%}{%- endif -%}{%- if row_rn==res -%}{%- set sev=vs_list[idx]|default(\\\ + \"\\\")|trim|upper -%}{%- set expl=ei_list[idx]|default(\\\"\\\")|trim|upper\ + \ -%}{%- set is_expl=(expl==\\\"TRUE\\\" or expl==\\\"YES\\\") -%}{%- if sev==\\\ + \"CRITICAL\\\" and is_expl -%}{%- set _=rcei.append(idx) -%}{%- set _=rce.append(1)\ + \ -%}{%- elif sev==\\\"CRITICAL\\\" -%}{%- set _=rci.append(idx) -%}{%- set\ + \ _=rc.append(1) -%}{%- elif sev==\\\"HIGH\\\" and is_expl -%}{%- set _=rhei.append(idx)\ + \ -%}{%- set _=rhe.append(1) -%}{%- elif sev==\\\"HIGH\\\" -%}{%- set _=rhi.append(idx)\ + \ -%}{%- set _=rh.append(1) -%}{%- elif sev==\\\"MEDIUM\\\" and is_expl -%}{%-\ + \ set _=rmei.append(idx) -%}{%- set _=rme.append(1) -%}{%- elif sev==\\\"\ + MEDIUM\\\" -%}{%- set _=rmi.append(idx) -%}{%- set _=rm.append(1) -%}{%- elif\ + \ sev==\\\"LOW\\\" and is_expl -%}{%- set _=rlei.append(idx) -%}{%- set _=rle.append(1)\ + \ -%}{%- elif sev==\\\"LOW\\\" -%}{%- set _=rli.append(idx) -%}{%- set _=rl.append(1)\ + \ -%}{%- else -%}{%- set _=roi.append(idx) -%}{%- set _=ro_.append(1) -%}{%-\ + \ endif -%}{%- endif -%}{%- endfor -%}{%- set res_sorted=rcei+rci+rhei+rhi+rmei+rmi+rlei+rli+roi\ + \ -%}{%- set res_total=res_sorted|length -%}{%- set res_rt=\\\"\\\" -%}{%-\ + \ if res_sorted|length>0 -%}{%- set res_rt=(rt_list[res_sorted[0]]|default(\\\ + \"\\\")|trim) if rt_list|length>res_sorted[0] else \\\"\\\" -%}{%- endif -%}{%-\ + \ set accent_col=\\\"#f87171\\\" if (rce|length>0 or rc|length>0) else (\\\ + \"#fcd34d\\\" if (rhe|length>0 or rh|length>0) else (\\\"#fdba74\\\" if (rme|length>0\ + \ or rm|length>0) else (\\\"#4ade80\\\" if (rle|length>0 or rl|length>0) else\ + \ \\\"#4a6880\\\"))) -%}
📄 Resource—{{ res }}
{%- if res_rt!=\\\"\\\" -%}{{ res_rt|replace(\\\ + \"_\\\",\\\" \\\")|title }}{%- endif -%}{{ res_total }} findings
{%- if rce|length>0 or rc|length>0 -%}{{ (rce|length+rc|length)\ + \ }}C{%- endif -%}{%- if rhe|length>0 or rh|length>0 -%}{{ (rhe|length+rh|length)\ + \ }}H{%- endif -%}{%- if rme|length>0 or rm|length>0 -%}{{ (rme|length+rm|length)\ + \ }}M{%- endif -%}{%- if rle|length>0 or rl|length>0 -%}{{ (rle|length+rl|length)\ + \ }}L{%- endif -%}▼
SeverityScoreStatusExploitRemediation{%- for idx in res_sorted\ + \ -%}{%- set f_cve=vn_list[idx]|default(\\\"\\\")|trim -%}{%- set f_sev=vs_list[idx]|default(\\\ + \"\\\")|trim|upper -%}{%- set f_sc=sc_list[idx]|default(\\\"\\\")|trim -%}{%-\ + \ set f_stat=ds_list[idx]|default(\\\"\\\")|trim|upper -%}{%- set f_expl=ei_list[idx]|default(\\\ + \"\\\")|trim|upper -%}{%- set f_fix=(rr_list[idx]|default(\\\"\\\")|trim)\ + \ if rr_list|length>idx else \\\"\\\" -%}{%- set row_bg=\\\"#0d1117\\\" if\ + \ loop.index is odd else \\\"#0f1318\\\" -%}{%- if f_sev==\\\"CRITICAL\\\"\ + \ -%}{%- set s_bg=\\\"#180404\\\" -%}{%- set s_bd=\\\"#5a1010\\\" -%}{%- set\ + \ s_tx=\\\"#f87171\\\" -%}{%- set s_lb=\\\"Critical\\\" -%}{%- elif f_sev==\\\ + \"HIGH\\\" -%}{%- set s_bg=\\\"#110c00\\\" -%}{%- set s_bd=\\\"#604800\\\"\ + \ -%}{%- set s_tx=\\\"#fcd34d\\\" -%}{%- set s_lb=\\\"High\\\" -%}{%- elif\ + \ f_sev==\\\"MEDIUM\\\" -%}{%- set s_bg=\\\"#120a00\\\" -%}{%- set s_bd=\\\ + \"#5a3010\\\" -%}{%- set s_tx=\\\"#fdba74\\\" -%}{%- set s_lb=\\\"Medium\\\ + \" -%}{%- elif f_sev==\\\"LOW\\\" -%}{%- set s_bg=\\\"#011006\\\" -%}{%- set\ + \ s_bd=\\\"#055038\\\" -%}{%- set s_tx=\\\"#4ade80\\\" -%}{%- set s_lb=\\\"\ + Low\\\" -%}{%- else -%}{%- set s_bg=\\\"#0c1018\\\" -%}{%- set s_bd=\\\"#1a2a38\\\ + \" -%}{%- set s_tx=\\\"#64748b\\\" -%}{%- set s_lb=\\\"N/A\\\" -%}{%- endif\ + \ -%}{%- if f_stat==\\\"OPEN\\\" -%}{%- set t_bg=\\\"#180404\\\" -%}{%- set\ + \ t_bd=\\\"#5a1010\\\" -%}{%- set t_tx=\\\"#f87171\\\" -%}{%- set t_lb=\\\"\ + Open\\\" -%}{%- elif f_stat==\\\"RESOLVED\\\" -%}{%- set t_bg=\\\"#011006\\\ + \" -%}{%- set t_bd=\\\"#055038\\\" -%}{%- set t_tx=\\\"#4ade80\\\" -%}{%-\ + \ set t_lb=\\\"Resolved\\\" -%}{%- elif f_stat==\\\"IN PROGRESS\\\" -%}{%-\ + \ set t_bg=\\\"#110c00\\\" -%}{%- set t_bd=\\\"#604800\\\" -%}{%- set t_tx=\\\ + \"#fcd34d\\\" -%}{%- set t_lb=\\\"In Prog.\\\" -%}{%- else -%}{%- set t_bg=\\\ + \"#0c1018\\\" -%}{%- set t_bd=\\\"#1a2a38\\\" -%}{%- set t_tx=\\\"#64748b\\\ + \" -%}{%- set t_lb=\\\"N/A\\\" -%}{%- endif -%}{%- if f_expl==\\\"TRUE\\\"\ + \ or f_expl==\\\"YES\\\" -%}{%- set e_bg=\\\"#180404\\\" -%}{%- set e_bd=\\\ + \"#5a1010\\\" -%}{%- set e_tx=\\\"#f87171\\\" -%}{%- set e_lb=\\\"Yes\\\"\ + \ -%}{%- elif f_expl==\\\"FALSE\\\" or f_expl==\\\"NO\\\" -%}{%- set e_bg=\\\ + \"#011006\\\" -%}{%- set e_bd=\\\"#055038\\\" -%}{%- set e_tx=\\\"#4ade80\\\ + \" -%}{%- set e_lb=\\\"No\\\" -%}{%- else -%}{%- set e_bg=\\\"#0c1018\\\"\ + \ -%}{%- set e_bd=\\\"#1a2a38\\\" -%}{%- set e_tx=\\\"#64748b\\\" -%}{%- set\ + \ e_lb=\\\"N/A\\\" -%}{%- endif -%}{%- if f_sc!=\\\"\\\" -%}{%- set sc_num=f_sc|float\ + \ -%}{%- set sc_col=\\\"#f87171\\\" if sc_num>=9.0 else (\\\"#fcd34d\\\" if\ + \ sc_num>=7.0 else (\\\"#fdba74\\\" if sc_num>=4.0 else \\\"#4ade80\\\"))\ + \ -%}{%- else -%}{%- set sc_col=\\\"#4a6880\\\" -%}{%- endif -%}{%-\ + \ endfor -%}
CVE
{{ f_cve if f_cve!=\\\"\\\" else \\\"N/A\\\" }}{{ s_lb }}{%- if f_sc!=\\\"\\\" -%}{{ f_sc }}{%- else -%}\u2014{%- endif -%}{{ t_lb }}{{ e_lb }}{{ f_fix if f_fix!=\\\"\\\" else \\\"\u2014\\\" }}
{%- endfor -%}\\r\\n{%- endif\ + \ -%}\\r\\n{%- if n_clean>0 -%}\\r\\n
✓ No Vulnerabilities Found
{{ n_clean }} resource{{\ + \ \\\"s\\\" if n_clean!=1 else \\\"\\\" }} — clean
▼
{%- for cres in clean_resources -%}
{{ cres }}No findings
{%- endfor -%}
\\r\\n{%- endif -%}\\\ + r\\n{%- endif -%}\\r\\n\",\"Include Case Data\":false,\"Template\":\"\ + {\\\"Content\\\":\\\"\\\",\\\"ContentTemplateName\\\":\\\"\\\",\\\"HtmlTemplateName\\\ + \":\\\"\\\"}\"}" +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null +action_name: TemplateEngine_Render Template +parallel_actions: [] +integration: TemplateEngine +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: + step_id: aa457994-2f68-4933-8910-79e99cefc8ee + playbook_id: eb684fa0-61d0-4d64-a704-09f1363d5347 + creation_time: 0 + modification_time: 0 + result_value: '' + result_json: '' + scope_entities_enrichment_data: [] +auto_skip_on_failure: false +previous_result_condition: '{}' +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/required_inputs_complete_a9a08.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/required_inputs_complete_a9a08.yaml new file mode 100644 index 0000000000..af42dca94b --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/required_inputs_complete_a9a08.yaml @@ -0,0 +1,61 @@ +name: Condition +description: Validates that the required Resource Name input is populated before proceeding. +identifier: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 +original_step_id: 1cb971ef-8625-4ff1-99ba-b075115e6431 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: [] +parent_step_id: '' +instance_name: Required Inputs Complete? +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: null +parameters: +- step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: Branches + value: '[{"LogicalOperator":0,"Conditions":[{"Operator":8,"FieldName":"[Input.Resource + Name (Required)]","Type":7,"Value":"","CustomOperatorName":"Core Functions.Not + Empty"}],"Order":1,"IsDefaultBranch":false,"Name":"Yes"},{"LogicalOperator":0,"Conditions":[],"Order":2,"IsDefaultBranch":true,"Name":"Branch"}]' +- step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: 'true' +- step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ErrorFallbackBranch + value: null +- step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: a9a08f8d-b631-42ee-9938-bd99b1d19fc2 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: 'true' +action_name: IfFlowCondition +parallel_actions: [] +integration: Flow +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: null +type: condition diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/select_current_resource_name_fc89f.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/select_current_resource_name_fc89f.yaml new file mode 100644 index 0000000000..635d581246 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/select_current_resource_name_fc89f.yaml @@ -0,0 +1,62 @@ +name: Entity Selection +description: Scopes the current loop item as the active entity so all subsequent actions + target the correct resource. +identifier: fc89f516-a6c6-4f57-b599-1a3cf386486a +original_step_id: 53e9f9dc-cdbf-4585-aa07-635324483b3a +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parent_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +instance_name: Select Current Resource Name +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parameters: +- step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ConditionOperator + value: '0' +- step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: Conditions + value: '[{"FieldName":"Entity.Identifier","Operator":0,"Value":"[Loop.Item]","Type":2,"CustomOperatorName":"Core + Functions.Equal"}]' +- step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: 'true' +- step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: fc89f516-a6c6-4f57-b599-1a3cf386486a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: 'true' +action_name: EntitySelection +parallel_actions: [] +integration: Flow +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/set_scope_list_resource_vulnerability_findings_failed_af57b.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/set_scope_list_resource_vulnerability_findings_failed_af57b.yaml new file mode 100644 index 0000000000..b72c4b4386 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/set_scope_list_resource_vulnerability_findings_failed_af57b.yaml @@ -0,0 +1,81 @@ +name: Tools_Append to Context Value +description: Records the resource name when vulnerability findings retrieval fails. +identifier: af57b1f6-8b83-4da5-85f7-668e13d08fd7 +original_step_id: 2787cfde-3359-4815-9b36-30e9cef63017 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef +parent_step_id: cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef +instance_name: Set Scope List Resource Vulnerability Findings FAILED +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parameters: +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 4b41988d-9fb1-4a11-b3e5-18f17c87bc84 +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Tools_Append to Context Value +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Scope":"Alert","Key":"failed_list_resource_vulnerability_findings","Value":"[Loop.Item]","Delimiter":","}' +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: af57b1f6-8b83-4da5-85f7-668e13d08fd7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: 'true' +action_name: Tools_Append to Context Value +parallel_actions: [] +integration: Tools +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: "{\n \"cb5cdba0-9b9f-4fcc-b693-ea49c11d3eef\": \"2\"\n\ + }" +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/set_vulnerability_findings_result_ec369.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/set_vulnerability_findings_result_ec369.yaml new file mode 100644 index 0000000000..7304d63981 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/set_vulnerability_findings_result_ec369.yaml @@ -0,0 +1,81 @@ +name: Siemplify_Set Scope Context Value +description: Stores the generated vulnerability findings report in the alert context. +identifier: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 +original_step_id: ed870df7-5ffd-46b6-97d9-f615cfc7dc9a +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 +parent_step_id: fd2d6b0e-a4e0-4a8f-9182-7a2278920d41 +instance_name: Set Vulnerability Findings Result +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: null +parameters: +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"vulnerability_findings_result","Key + Value":"[Prepare Vulnerability Findings Details.ScriptResult]"}' +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: ec3694f5-a5fe-4c06-9dd1-f94fc52a5b60 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null +action_name: Siemplify_Set Scope Context Value +parallel_actions: [] +integration: Siemplify +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/store_vulnerability_findings_details_1297f.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/store_vulnerability_findings_details_1297f.yaml new file mode 100644 index 0000000000..3a174c66a3 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/store_vulnerability_findings_details_1297f.yaml @@ -0,0 +1,345 @@ +name: Parallel Actions +description: '' +identifier: 1297fcf3-a1a0-4349-9f71-bb6f03f1e8a9 +original_step_id: adb21ed6-b9ec-4073-a99c-326f5bc97ef4 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- 78a45a17-d4c8-4fee-9eba-78bc0fd38d12 +parent_step_id: 78a45a17-d4c8-4fee-9eba-78bc0fd38d12 +instance_name: Store Vulnerability Findings Details +is_automatic: true +is_skippable: false +action_provider: ParallelActionsContainer +start_loop_step_id: null +parameters: [] +action_name: ParallelActionsContainer +parallel_actions: +- name: Siemplify_Set Scope Context Value + description: Stores the CVSS score associated with the vulnerability + identifier: f390bccc-5aec-491a-a879-2ef816cfd09d + original_step_id: f2ab51b6-adca-4164-9da5-d43b21084a4e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Set CVE Score + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"vulnerability_score","Key Value":"[List + Vulnerability Findings.JsonResult| \"Vulnerability Findings.score\"]"}' + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: f390bccc-5aec-491a-a879-2ef816cfd09d + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 1297fcf3-a1a0-4349-9f71-bb6f03f1e8a9 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: true + previous_result_condition: null + type: action +- name: Siemplify_Set Scope Context Value + description: Stores the current status of the vulnerability finding. + identifier: 2ab807b9-f585-4624-b269-2b7b40b3092f + original_step_id: 93c39231-c497-46f8-a90f-cfacb0f27b53 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Set Detection Status + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"detection_status","Key Value":"[List + Vulnerability Findings.JsonResult| \"Vulnerability Findings.status\"]"}' + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: 2ab807b9-f585-4624-b269-2b7b40b3092f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 1297fcf3-a1a0-4349-9f71-bb6f03f1e8a9 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: true + previous_result_condition: null + type: action +- name: Siemplify_Set Scope Context Value + description: Stores information indicating whether a known exploit exists for + the vulnerability. + identifier: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + original_step_id: 39e1dec7-1291-4226-ab45-2c3a2efe9d7b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Set Exploitability Information + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"exploitability_information","Key + Value":"[List Vulnerability Findings.JsonResult| \"Vulnerability Findings.hasExploit\"]"}' + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: a8a7a087-fe62-45b9-a6fe-2816adce69d5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 1297fcf3-a1a0-4349-9f71-bb6f03f1e8a9 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: true + previous_result_condition: null + type: action +- name: Siemplify_Set Scope Context Value + description: Stores the recommended remediation or fix guidance provided by Wiz. + identifier: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + original_step_id: 4c334d53-72f9-41f3-8a2d-46702e50616a + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Set Remediation + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"remediation_recommendation","Key + Value":"[List Vulnerability Findings.JsonResult| \"Vulnerability Findings.remediation\"]"}' + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: 59d6551d-abdd-4696-a6d7-c7148cbe35e5 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 1297fcf3-a1a0-4349-9f71-bb6f03f1e8a9 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: true + previous_result_condition: null + type: action +integration: null +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: parallel_actions_container diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/store_vulnerability_findings_details_78a45.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/store_vulnerability_findings_details_78a45.yaml new file mode 100644 index 0000000000..db93c330af --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/store_vulnerability_findings_details_78a45.yaml @@ -0,0 +1,424 @@ +name: Parallel Actions +description: '' +identifier: 78a45a17-d4c8-4fee-9eba-78bc0fd38d12 +original_step_id: 8d6ffd25-cd87-4a5e-8bba-0eab1d43f6b7 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- 0011d87a-557c-4d89-a391-7765dcdee5cf +parent_step_id: 0011d87a-557c-4d89-a391-7765dcdee5cf +instance_name: Store Vulnerability Findings Details +is_automatic: true +is_skippable: false +action_provider: ParallelActionsContainer +start_loop_step_id: null +parameters: [] +action_name: ParallelActionsContainer +parallel_actions: +- name: Siemplify_Set Scope Context Value + description: Stores the vulnerability description details. + identifier: 187c8102-b535-405f-aae0-79dd6e363912 + original_step_id: 585550a5-f630-46d7-a763-5679108ece00 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Set CVE Description + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"vulnerability_description","Key + Value":"[List Vulnerability Findings.JsonResult| \"Vulnerability Findings.CVEDescription\"]"}' + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: 187c8102-b535-405f-aae0-79dd6e363912 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 78a45a17-d4c8-4fee-9eba-78bc0fd38d12 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: true + previous_result_condition: null + type: action +- name: Siemplify_Set Scope Context Value + description: Stores the vulnerability or CVE identifier. + identifier: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + original_step_id: cf83deb9-7f64-447d-8473-078160f1659f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Set CVE Name + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"vulnerability_name","Key Value":"[List + Vulnerability Findings.JsonResult| \"Vulnerability Findings.name\"]"}' + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: 7a7a20a3-b5ce-44f2-8eb6-bb7b03dbbe3e + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 78a45a17-d4c8-4fee-9eba-78bc0fd38d12 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: true + previous_result_condition: null + type: action +- name: Siemplify_Set Scope Context Value + description: Stores the severity level of the vulnerability. + identifier: 864d7e43-c0ba-4155-912e-65a976ef7627 + original_step_id: 4b0c97b3-e1db-4a19-993f-847543dda45f + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Set CVE Severity + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"vulnerability_severity","Key + Value":"[List Vulnerability Findings.JsonResult| \"Vulnerability Findings.CVSSSeverity\"]"}' + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: 864d7e43-c0ba-4155-912e-65a976ef7627 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 78a45a17-d4c8-4fee-9eba-78bc0fd38d12 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: true + previous_result_condition: null + type: action +- name: Siemplify_Set Scope Context Value + description: Stores the affected resource name in the alert context. + identifier: 39270a31-6532-4b7f-a27b-020b836f326b + original_step_id: 82331f2f-4b50-4f49-9a88-7d4162dca7d7 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Set Resource Name + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"resource_name","Key Value":"[List + Vulnerability Findings.JsonResult| \"Vulnerability Findings.vulnerableAsset.name\"]"}' + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: 39270a31-6532-4b7f-a27b-020b836f326b + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 78a45a17-d4c8-4fee-9eba-78bc0fd38d12 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: true + previous_result_condition: null + type: action +- name: Siemplify_Set Scope Context Value + description: Stores the affected resource type in the alert context. + identifier: cde3633c-d144-4f1b-b3bf-b36b38b199aa + original_step_id: 84fe2e2f-95ef-49ca-afbc-6474aaf5ba39 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + parent_step_ids: [] + parent_step_id: '' + instance_name: Set Resource Type + is_automatic: true + is_skippable: false + action_provider: Scripts + start_loop_step_id: null + parameters: + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 2aa5208a-7b9d-4a5e-bb00-2921dd06d5ac + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Siemplify_Set Scope Context Value + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Context Scope":"Alert","Key Name":"resource_type","Key Value":"[List + Vulnerability Findings.JsonResult| \"Vulnerability Findings.vulnerableAsset.type\"]"}' + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities + - step_id: cde3633c-d144-4f1b-b3bf-b36b38b199aa + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: null + action_name: Siemplify_Set Scope Context Value + parallel_actions: [] + integration: Siemplify + parent_container_id: 78a45a17-d4c8-4fee-9eba-78bc0fd38d12 + is_touched_by_ai: false + is_debug_mock_data: false + step_debug_data: null + auto_skip_on_failure: true + previous_result_condition: null + type: action +integration: null +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: parallel_actions_container diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/true_append_evaluation_68dd8.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/true_append_evaluation_68dd8.yaml new file mode 100644 index 0000000000..8c7702d26c --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/true_append_evaluation_68dd8.yaml @@ -0,0 +1,80 @@ +name: Tools_Append to Context Value +description: Records a successful retrieval result for the current resource. +identifier: 68dd8797-419b-444d-baac-d53b8952cc69 +original_step_id: 01ad099e-bcbd-4065-9fd3-ecb834d664a4 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- de0877ab-9202-47b0-abb7-098877419d12 +parent_step_id: de0877ab-9202-47b0-abb7-098877419d12 +instance_name: 'True: Append Evaluation' +is_automatic: true +is_skippable: false +action_provider: Scripts +start_loop_step_id: 9e4179c4-39a1-4fe6-b5de-6ba095fe06f2 +parameters: +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: null +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DynamicInjectionInstancePlaceholder + value: '' +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FallbackIntegrationInstance + value: null +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: FetchInstanceByName + value: 'false' +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: 'false' +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: IntegrationInstance + value: 4b41988d-9fb1-4a11-b3e5-18f17c87bc84 +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: RetryConfiguration + value: '{"Enabled":false,"IntervalInSeconds":30,"NumberOfRetries":1}' +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptName + value: Tools_Append to Context Value +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ScriptParametersEntityFields + value: '{"Scope":"Alert","Key":"list_resource_vulnerability_findings_evaluation","Value":"TRUE","Delimiter":","}' +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: 68dd8797-419b-444d-baac-d53b8952cc69 + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: 'true' +action_name: Tools_Append to Context Value +parallel_actions: [] +integration: Tools +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: action diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/which_evaluation_result_d75e1.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/which_evaluation_result_d75e1.yaml new file mode 100644 index 0000000000..2806c5eb8c --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/steps/which_evaluation_result_d75e1.yaml @@ -0,0 +1,65 @@ +name: Condition +description: Determines the overall execution outcome (Successful, Partial, or Failed) + based on collected evaluation results. +identifier: d75e123b-1c47-468d-9869-fa7a024815ce +original_step_id: 1055b694-6862-4c9d-b55e-e42d30a212d7 +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +parent_step_ids: +- afef6453-7dd4-49dd-803a-741fd164e387 +parent_step_id: afef6453-7dd4-49dd-803a-741fd164e387 +instance_name: Which Evaluation Result? +is_automatic: true +is_skippable: false +action_provider: Flow +start_loop_step_id: null +parameters: +- step_id: d75e123b-1c47-468d-9869-fa7a024815ce + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: AssignedUsers + value: null +- step_id: d75e123b-1c47-468d-9869-fa7a024815ce + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: Branches + value: '[{"LogicalOperator":0,"Conditions":[{"Operator":6,"FieldName":"[Alert.list_resource_vulnerability_findings_evaluation| + trimChars(\"-,\")]","Type":7,"Value":"FALSE","CustomOperatorName":"Core Functions.Not + Contains"}],"Order":1,"IsDefaultBranch":false,"Name":"True"},{"LogicalOperator":0,"Conditions":[],"Order":3,"IsDefaultBranch":true,"Name":"Branch"},{"LogicalOperator":0,"Conditions":[{"Operator":1,"FieldName":"[Alert.list_resource_vulnerability_findings_evaluation| + trimChars(\"-,\")]","Type":7,"Value":"TRUE","CustomOperatorName":"Core Functions.Contains"},{"Operator":1,"FieldName":"[Alert.list_resource_vulnerability_findings_evaluation| + trimChars(\"-,\")]","Type":7,"Value":"FALSE","CustomOperatorName":"Core Functions.Contains"}],"Order":2,"IsDefaultBranch":false,"Name":"Partial"}]' +- step_id: d75e123b-1c47-468d-9869-fa7a024815ce + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: DistinctDuplicateEntities + value: 'true' +- step_id: d75e123b-1c47-468d-9869-fa7a024815ce + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: ErrorFallbackBranch + value: null +- step_id: d75e123b-1c47-468d-9869-fa7a024815ce + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: HasApprovalLink + value: null +- step_id: d75e123b-1c47-468d-9869-fa7a024815ce + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: MessageToAssignee + value: null +- step_id: d75e123b-1c47-468d-9869-fa7a024815ce + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: PendingActionTimeout + value: null +- step_id: d75e123b-1c47-468d-9869-fa7a024815ce + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: SelectedScopeName + value: All entities +- step_id: d75e123b-1c47-468d-9869-fa7a024815ce + playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 + name: UseEntitiesLoopScope + value: 'true' +action_name: IfFlowCondition +parallel_actions: [] +integration: Flow +parent_container_id: null +is_touched_by_ai: false +is_debug_mock_data: false +step_debug_data: null +auto_skip_on_failure: false +previous_result_condition: '{}' +type: condition diff --git a/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/trigger.yaml b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/trigger.yaml new file mode 100644 index 0000000000..0a00c79848 --- /dev/null +++ b/content/playbooks/third_party/community/wiz___list_resource_vulnerability_findings/trigger.yaml @@ -0,0 +1,21 @@ +identifier: cacb9122-5181-455d-a026-36315783bfd1 +is_enabled: true +playbook_id: b537cafe-9fcf-4659-9b90-227f4315b7d1 +type_: get_inputs +conditions: +- field_name: Resource Name (Required) + value: '' + match_type: equal + custom_operator_name: null +- field_name: CVE IDs (Optional) + value: '' + match_type: equal + custom_operator_name: null +- field_name: Max Findings To Return (Optional) + value: '20' + match_type: equal + custom_operator_name: null +logical_operator: and +environments: +- '*' +playbook_name: null