The following table lists the dynamic parameters available for alerts in Automated Response Playbooks. A file alert includes information about the suspicious file, the process that attempted to perform an action on the file, the endpoint on which the event occurred and the user that was logged into the endpoint when the event occurred.ParameterDescription / ValuesAlert.Endpoint_remediationIndicates if a remediation action was performed on the alert. Possible values:Invalid (0), Nothing (1), Kill (2), Suspend (4), Rename (8), Delete (16), Block (32)Alert.Endpoint_remediation_statusThe status of the remediation action that was performed.Value can be Success or FailedAlert.IDThe ID of the alert as it appears in the consoleAlert.NameThe name of the alert as it appears in the consoleFile.NameThe name of the file that triggered the alertFile.PathThe path of the file that triggered the alertFile.SHA256The SHA256 of the file that triggered the alertHost.IDThe ID of the host that triggered the alertHost.IPThe IP of the host that triggered the alertHost.NameThe name of the host that triggered the alertNetwork.IDThe ID given to the socket/domain that was involved in the event that triggered the alertNetwork.TypeSocket (0) or Domain (1)Process.cmd_lineThe CMD line of the process that triggered the alertProcess.File_nameThe name of the file that spawned the process that triggered the alertProcess.OccurrenceIDThe ID of the process instance that triggered the alertProcess.PathThe path of the process that triggered the alertProcess.SignedTrue, falseProcessAncestorsList of parents of the process that triggered the alertProcessAncestors.countThe number of parents of the process that triggered the alertUser.IDThe ID of the user that triggered the alertUser.NameThe name of the user that triggered the alert