Azure Storage Table

Create and Manage Azure Storage Tables and Entities.
This integration was integrated and tested with version “2020-10-02” of Azure Storage Table

Configure Azure Storage Table in Cortex

Shared Access Signatures (SAS) Permissions

In order to use the integration use-cases,
please make sure your SAS token contains the following permissions:

1. ‘Table’ service.
2. ‘Service’ and ‘Object’ resource types.
3. ‘Read’, ‘Write’, ‘Delete’, ‘List’, ‘Create’, ‘Add’, ‘Update’ and ‘Immutable storage’ permissions.

• Review and select “Generate”.

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

azure-storage-table-create

Creates a new table in a storage account.

Base Command

azure-storage-table-create

Input

Context Output

Command Example

!azure-storage-table-create table_name="xsoar"

Context Example

{
    "AzureStorageTable": {
        "Table": {
            "name": "xsoar"
        }
    }
}

Human Readable Output

Table xsoar successfully created.

azure-storage-table-delete

Delete the specified table and any data it contains.

Base Command

azure-storage-table-delete

Input

Context Output

There is no context output for this command.

Command Example

!azure-storage-table-delete table_name="xsoar"

Human Readable Output

Table xsoar successfully deleted.

azure-storage-table-query

List tables under the specified account.

Base Command

azure-storage-table-query

Input

Context Output

Command Example

!azure-storage-table-query filter="TableName%20eq%20'xsoar'"

Context Example

{
    "AzureStorageTable": {
        "Table": {
            "name": "xsoar"
        }
    }
}

Human Readable Output

Tables List

Current page size: 50
Showing page 1 out others that may exist

Name
xsoar

azure-storage-table-entity-insert

Insert a new entity into a table.

Base Command

azure-storage-table-entity-insert

Input

Context Output

Command Example

!azure-storage-table-entity-insert table_name="xsoar" partition_key="xsoar-partition" row_key="xsoar-row" entity_fields=`{"Age":20}`

Context Example

{
    "AzureStorageTable": {
        "Table": {
            "Entity": [
                {
                    "Age": 20,
                    "PartitionKey": "xsoar-partition",
                    "RowKey": "xsoar-row",
                    "Timestamp": "2021-11-28T13:23:18"
                }
            ],
            "name": "xsoar"
        }
    }
}

Human Readable Output

Entity Fields for xsoar Table

Age	Partition Key	Row Key	Timestamp
20	xsoar-partition	xsoar-row	2021-11-28T13:23:18

azure-storage-table-entity-update

Update an existing entity in a table. The Update Entity command does not replace the existing entity.

Base Command

azure-storage-table-entity-update

Input

Context Output

There is no context output for this command.

Command Example

!azure-storage-table-entity-update table_name="xsoar" partition_key="xsoar-partition" row_key="xsoar-row" entity_fields=`{"Address":"New York"}`

Human Readable Output

Entity in xsoar table successfully updated.

azure-storage-table-entity-replace

Replace an existing entity in a table. The Replace Entity command replace the entire entity and can be used to remove properties.

Base Command

azure-storage-table-entity-replace

Input

Context Output

There is no context output for this command.

Command Example

!azure-storage-table-entity-replace table_name="xsoar" partition_key="xsoar-partition" row_key="xsoar-row" entity_fields=`{"City": "TLV" }`

Human Readable Output

Entity in xsoar table successfully replaced.

azure-storage-table-entity-query

Query Entities in a table.

Base Command

azure-storage-table-entity-query

Input

Context Output

Command Example

!azure-storage-table-entity-query table_name="xsoar"

Context Example

{
    "AzureStorageTable": {
        "Table": {
            "Entity": [
                {
                    "Address": "New York",
                    "City": "TLV",
                    "PartitionKey": "xsoar-partition",
                    "RowKey": "xsoar-row",
                    "Timestamp": "2021-11-28T13:23:27"
                }
            ],
            "name": "xsoar"
        }
    }
}

Human Readable Output

Entity Fields for xsoar table

Current page size: 50
Showing page 1 out others that may exist

Address	City	Partition Key	Row Key	Timestamp
New York	TLV	xsoar-partition	xsoar-row	2021-11-28T13:23:27

azure-storage-table-entity-delete

Delete an existing entity in a table.

Base Command

azure-storage-table-entity-delete

Input

Context Output

There is no context output for this command.

Command Example

!azure-storage-table-entity-delete table_name="xsoar" partition_key="xsoar-partition" row_key="xsoar-row"

Human Readable Output

Entity in xsoar table successfully deleted.