Sensitive Data Alert Escalation
A 3-step recipe with Varonis. We can help you get access.
Recipe · 3 steps
Sensitive Data Alert Escalation
with Varonis · Threat Detection & Response Management
Escalate sensitive-data alerts and close non-sensitive ones.
- Retrieve the newest open alert, including the sensitive-data flag, so the escalation decision can be made.
- Escalate the alert into Under Investigation status because it affects a resource containing classified sensitive data.
- Close the alert as legitimate activity because the affected resource does not contain classified sensitive data.
What you'll need to have ready
- apiKey: Varonis DatAlert API key sent in the X-API-Key header.
- lastDays: How many days back to search for open alerts.
- escalationNote: Note recorded when an alert is escalated.
For your developer
Arazzo workflow varonis:sensitive-data-alert-escalation, 3 operations: getAlerts → updateAlertStatus → closeAlert. Specs on APIs.io.