Limited disclosure, restricted to participants’ organizations. Sources may use TLP:AMBER when information requires support to be effectively acted upon, yet carries risks to privacy, reputation, or operations if shared outside of the organizations involved. Recipients may only share TLP:AMBER information with members of their own organization, and with clients or customers who need to know the information to protect themselves or prevent further harm.
Process Overview:
The following process outlines the steps to create a webhook based expirations monitor for Hudu
Process Steps:
Hudu Configuration
- Navigate to Admin -> Alerts in Hudu and create a new alert
- Title the webhook Rewst Expirations, and select the Expiration List alert type
- Set the trigger alert, and select the option to alert on all expirations
- Check the "Optional: Configured Webhook" checkbox and paste in the Webhook URL from the Rewst Workflow trigger
-
Enter the following webook payload:
{ "count": "$EXPIRATIONS_COUNT", "expirations": "$EXPIRATIONS_HUDU_URL" }
Rewst Workflow - Expirations Master Workflow
Trigger: Core - Webhook. Accept POST. Integration override for Hudu and PSA
Workflow Variables: Expiration Threshold
- BEGIN:
- Noop to initialize workflow and set logs variable
- ListExpirations
- Lists all expirations for the account
- In transition, filter down list to only expirations with a date in the next number of days set by the Expiration Threshold variable
- Log success/error to the logs variable
- For each expiration in the filtered list, send to the Create Hudu Expiration Alert subworkflow
- Asset ID is mapped in the output of this API call as expirationable_id, not id
- Log success/error to the logs variable
- END
- End workflow and report logged errors. Errors in alert creation will be handled by the subworkflow(s)
Rewst Workflow - Create Hudu Expiration Alert
Input Variables:
- companyId
- date
- id
- BEGIN
- Noop to initialize workflow and set logs variable
- Get Asset
- Using input variables for company ID and asset ID, lookup the details of the expiration
- Save the details as data aliases
- Log success/error to the logs variable
- Check for service ticket
- List service tickets from PSA to check for existing alert
- Ticket title will be in the format of "Upcoming expiration for {{Name}}"
- If existing alert is present matching the title, path to end
- Log success/error to logs variable
- List service tickets from PSA to check for existing alert
- Create new service ticket
- Create a new service ticket with the following format
- Title: Upcoming expiration for {{Name}}
- Initial Description: An asset of the type {{Expiration Type}} titled {{Name}} is set to expire on {{Date}}. View the details here {{AssetLink}}
- Log success/error to logs variable
- Create a new service ticket with the following format
- END
- End workflow and report logged errors