Retrieve Alerts For IOCs - Dataminr Pulse

This playbook is used to fetch alerts from Dataminr Pulse, which will be based on the given input text. First, it will extract indicators from the input text, then it will use extracted indicators to retrieve alerts from Dataminr Pulse. After that, it will store related alerts in the context.

Dataminr Pulse · 10 tasks · 3 inputs · 0 outputs

Inputs

  • text — Text to enrich (default will be entire incident context).
  • num — The number of alerts to retrieve.
  • use_configured_watchlist_names — A Boolean indicating that it should use configured watchlist names. Provide "yes " or "no" as value. Default will be "yes".

Commands used

dataminrpulse-alerts-get extractIndicators

Flowchart

yes yes Start Start Done Done Integration is not enabled. - Print Integration is not enabled. Print Is Dataminr Pulse or Dataminr Pulse ReGenAI integration enabled? - Exists Is Dataminr Pulse or Data... Exists Extract indicators. - extractIndicators Extract indicators. extractIndicators Get alerts from Dataminr Pulse API for indicator list. - dataminrpulse-alerts-get Get alerts from Dataminr ... dataminrpulse-alerts-get Transform extracted indicators to list. - DataminrPulseTransformExtractedIndicatorsToList Transform extracted indic... DataminrPulseTransformExtract... Do extracted indicators exist? - Exists Do extracted indicators e... Exists Indicators not found. - Print Indicators not found. Print Delete context for ExtractedIndicatorsForDataminrPulse key. - DeleteContext Delete context for Extrac... DeleteContext