CheckIndicatorValue

Details

ID	`CheckIndicatorValue`
Language	python
From Version	6.5.0
Docker Image	`demisto/python3:3.12.13.10404775`
Tags	evaluation polling

README

Check if indicators exist in the Threat Intel DB.

Script Data

Name	Description
Script Type	python3
Cortex XSOAR Version	6.5.0

Inputs

Argument Name	Description
indicator	The indicator value to check
encoding	Decode indicators by the algorithm given

Outputs

Path	Description	Type
CheckIndicatorValue.Indicator	The indicator value	string
CheckIndicatorValue.EncodedIndicator	The encoded indicator value given	string
CheckIndicatorValue.Exists	Whether the indicator exist	boolean

Source

CheckIndicatorValue.py CheckIndicatorValue_test.py CheckIndicatorValue.yml

Download History Raw

commonfields:
  id: CheckIndicatorValue
  version: -1
name: CheckIndicatorValue
script: ''
type: python
tags:
- evaluation
- polling
comment: Check if indicators exist in the Threat Intel database.
enabled: true
args:
- name: indicator
  required: true
  description: The indicator value to check.
  isArray: true
- name: encoding
  auto: PREDEFINED
  predefined:
  - none
  - base64
  - url-encoding
  description: Decode indicators by the algorithm given.
  defaultValue: none
outputs:
- contextPath: CheckIndicatorValue.Indicator
  description: The indicator value.
  type: string
- contextPath: CheckIndicatorValue.EncodedIndicator
  description: The encoded indicator value given.
  type: string
- contextPath: CheckIndicatorValue.Exists
  description: Whether the indicator exists.
  type: boolean
scripttarget: 0
subtype: python3
dockerimage: demisto/python3:3.12.13.10404775
runas: DBotWeakRole
fromversion: 6.5.0
tests:
- No tests (auto formatted)