Enrich ThinkstCanary Events

Enrich events that are received as part of a ThinkstCanary incident.

Thinkst Canary · 2 tasks · 0 inputs · 0 outputs

Details

ID	`Enrich ThinkstCanary Events`
From Version	6.9.0
Tasks	2

README

Enrich events that are received as part of a ThinkstCanary incident.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

Commands

This playbook does not use any commands.

Playbook Inputs

There are no inputs for this playbook.

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

Enrich ThinkstCanary Events

Flowchart

Source

playbook-Enrich_Thinkst_Canary_Events.yml

Download History Raw

id: Enrich ThinkstCanary Events
version: -1
name: Enrich ThinkstCanary Events
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: fc1ec5b7-261d-47a3-8b15-651730232085
    type: start
    task:
      id: fc1ec5b7-261d-47a3-8b15-651730232085
      version: -1
      name: ""
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "2"
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 450,
          "y": 50
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "2":
    id: "2"
    taskid: 88c31182-bc10-41f3-8a66-88be355428ef
    type: regular
    task:
      id: 88c31182-bc10-41f3-8a66-88be355428ef
      version: -1
      name: Enrich Thinkst Canary Events
      description: Set a value in context under the key you entered.
      scriptName: Set
      type: regular
      iscommand: false
      brand: ""
    scriptarguments:
      key:
        simple: CanaryTools.Events
      value:
        complex:
          root: incident.labels
          accessor: description
          transformers:
          - operator: ParseJSON
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 450,
          "y": 250
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
view: |-
  {
    "linkLabelsPosition": {},
    "paper": {
      "dimensions": {
        "height": 295,
        "width": 380,
        "x": 450,
        "y": 50
      }
    }
  }
inputs: []
outputs: []
quiet: true
tests:
- No tests (auto formatted)
fromversion: 6.9.0
description: Enrich events that are received as part of a ThinkstCanary incident.