@@ -11,8 +11,7 @@ Use the `code42` command to interact with your Code42 environment.
1111* ` code42 security-data ` is a CLI tool for extracting AED events.
1212 Additionally, you can choose to only get events that Code42 previously did not observe since you last recorded a
1313 checkpoint (provided you do not change your query).
14- * ` code42 high-risk-employee ` is a collection of tools for managing the high risk employee detection list. Similarly,
15- there is ` code42 departing-employee ` .
14+ * ` code42 watchlists ` is a collection of tools for managing your employee watchlists.
1615
1716## Requirements
1817
@@ -212,38 +211,6 @@ To get the results of a saved search, use the `--saved-search` option with your
212211code42 security-data search --saved-search < ID>
213212```
214213
215- ## Detection Lists
216-
217- You can both add and remove employees from detection lists using the CLI. This example uses ` high-risk-employee ` .
218-
219- ``` bash
220- code42 high-risk-employee add user@example.com --notes " These are notes"
221- code42 high-risk-employee remove user@example.com
222- ```
223-
224- Detection lists include a ` bulk ` command. To add employees to a list, you can pass in a csv file. First, generate the
225- csv file for the desired command by executing the ` generate-template ` command:
226-
227- ``` bash
228- code42 high-risk-employee bulk generate-template add
229- ```
230-
231- Notice that ` generate-template ` takes a ` cmd ` parameter for determining what type of template to generate. In the
232- example above, we give it the value ` add ` to generate a file for bulk adding users to the high risk employee list.
233-
234- Next, fill out the csv file with all the users and then pass it in as a parameter to ` bulk add ` :
235-
236- ``` bash
237- code42 high-risk-employee bulk add users_to_add.csv
238- ```
239-
240- Note that for ` bulk remove ` , the file only has to be an end-line delimited list of users with one line per user.
241-
242- ## Known Issues
243-
244- In ` security-data ` , only the first 10,000 of each set of events containing the exact same insertion timestamp is
245- reported.
246-
247214## Troubleshooting
248215
249216If you keep getting prompted for your password, try resetting with ` code42 profile reset-pw ` .
0 commit comments