Initial incident details should be the name of the reporting person, or ID of the SIEM alert/incident, and description of the lost device.
- User: the owner of the device
This playbook uses the following sub-playbooks, integrations, and scripts.
This playbook does not use any sub-playbooks.
This playbook does not use any integrations.
This playbook does not use any scripts.
This playbook does not use any commands.
There are no inputs for this playbook.
There are no outputs for this playbook.