Asset device

Create a ticket for an application that a user tried to run and it was blocked.

Setup

Event

{
  "uuid": "8a8cf4ef-6881-4e35-8c5f-37b7d93651a6",
  "timestamp": "2020-02-24T13:04:20+00:00",
  "level": "INFO",
  "action": "OSQUERY_RESULT",
  "meta": null,
  "changes": {
      "results": {
        "last": 0,
        "latest": 10
      },
      "last_event": {
          "last": "2020-04-01T10:10:11+00:00",
          "latest": "2020-04-01T10:10:25+00:00"
      }
  },
  "item": {
    "id": "9090f0cd-aa05-4acb-a41d-7579acdced7a",
    "name": "get procs (copy)"
  },
  "company": {
    "uuid": "79bc06fe-6ef7-489c-bed2-f2fd79d72f25",
    "name": "Zercurity"
  },
  "user": null,
  "team": {
    "uuid": "40fad3b4-0b68-4df9-ba69-3e663e770265",
    "name": "Zercurity"
  },
  "asset": {
    "uuid": "564d4647-9b96-9231-b3d7-f41acb0ac7f2",
    "name": "VMBZRhGKwYam"
  }
}

States

Full example