CustomIndicatorDemo

This is a demo integration that demonstrates the usage of the CustomIndicator helper class.

Vulnerability Management · Developer Tools

Details

ID	`CustomIndicatorDemo`
Provider	Open Source
Category	Vulnerability Management
From Version	5.5.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	Agentix XSIAM

README

Custom Indicator Demo is a demo integration that demonstrates the usage of the CustomIndicator helper class.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

test-custom-indicator

This command demonstrates the usage of CustomIndicator.

Base Command

test-custom-indicator

Input

There are no input arguments for this command.

Context Output

Path	Type	Description
Demo.Result.Output	String	Dummy output.

Context Example

DBotScore
[
 {
  "Indicator": "custom_value",
  "Score": 1,
  "Type": "MyCustomIndicator",
  "Vendor": "CustomIndicatorDemo"
 }
]
Demo.Result
{
 "dummy": "test"
}
custom
[
 {
  "Value": "custom_value",
  "param1": "value1",
  "param2": "value2"
 }
]

Command Example

!test-custom-indicator

Human Readable Output

custom_value

Commands (1)

test-custom-indicator
This command demonstrates the usage of the CustomIndicator helper class.

Source

CustomIndicatorDemo.py CustomIndicatorDemo_test.py CustomIndicatorDemo.yml command_examples.txt

Download History Raw

from CustomIndicatorDemo import Client, custom_indicator_creation


def test_custom_indicator_test():
    """
    Given
        - Dummy result
    When
        - dummy client is passed
    Then
        - return enriched indicator and result
    """
    client = Client(base_url="some_mock_url", verify=False)
    res = custom_indicator_creation(client)
    indicator = res.indicator
    assert indicator.data["param1"] == "value1"
    assert indicator.data["param2"] == "value2"
    assert indicator.value == "custom_value"
    assert res.outputs["dummy"] == "test"