Digital Guardian

Digital Guardian Destination Address

Digital Guardian Source IP

Digital Guardian Username

Digital Guardian Filename

Digital Guardian Sensitivity

Digital Guardian Classification

Digital Guardian Activity

Digital Guardian Email Recipient

Digital Guardian Policy

Digital Guardian Attachment Filename

Digital Guardian Process Name

Digital Guardian Threat Type

Digital Guardian Command line

Digital Guardian Email Subject

Digital Guardian Parent Process Name

Digital Guardian Computer Name

Digital Guardian Alarm Name

Digital Guardian Remote Port

Digital Guardian Email Sender

Digital Guardian ARC UID

Digital Guardian Destination DNS Domain

Digital Guardian Source Address

Use Digital Guardian Integration to fetch incidents and to programmatically add or remove entries from watchlists and component lists.

This playbook will show how to handle an exfiltration event through Digital Guardian by emailing a user's manager and adding the user to a DG Watchlist.

Digital Guardian Activity

Digital Guardian Threat Type

Digital Guardian Policy

Digital Guardian Alarm Name

Digital Guardian Sensitivity

Digital Guardian ARC UID

Digital Guardian Classification

Digital Guardian Email Subject

Digital Guardian ARC event collector.

Use Digital Guardian Integration to fetch incidents and to programmatically add or remove entries from watchlists and component lists.

This playbook will show how to handle an exfiltration event through Digital Guardian by emailing a user's manager and adding the user to a DG Watchlist.