Retrieve Alerts For IOCs - Dataminr Pulse
This playbook is used to fetch alerts from Dataminr Pulse, which will be based on the given input text. First, it will extract indicators from the input text, then it will use extracted indicators to retrieve alerts from Dataminr Pulse. After that, it will store related alerts in the context.
- Pack
- DataminrPulse
- Tasks
- 10
Inputs
- text — Text to enrich (default will be entire incident context).
- num — The number of alerts to retrieve.
- use_configured_watchlist_names — A Boolean indicating that it should use configured watchlist names. Provide "yes " or "no" as value. Default will be "yes".
Commands used
- dataminrpulse-alerts-get
- extractIndicators