Details
| ID | CompareIndicators |
|---|---|
| Language | python |
| From Version | 6.0.0 |
| Docker Image | demisto/netutils:1.0.0.10187688 |
README
Find the differences between two indicators lists.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | |
| Cortex XSOAR Version | 6.0.0 |
Inputs
| Argument Name | Description |
|---|---|
| base_list | Either a list of Indicators of Compromise or an EntryID to a File containing a list. |
| compare_to_list | Either a list of Indicators of Compromise or an EntryID to a File containing a list. |
Outputs
| Path | Description | Type |
|---|---|---|
| IndicatorsCompare.BaseList | Indicators that appear in the first indicators list only. | String |
| IndicatorsCompare.CompareList | Indicators that appear in the second indicators list only. | String |
Script Example
!CompareIndicators base_list="abcd,1.1.1.0/30,2.2.2.2,3.3.3.3-3.3.3.6" compare_to_list="bcde,1.1.1.2,2.2.2.2,3.3.3.2-3.3.3.5"
Context Example
{
"IndicatorCompare": {
"BaseList": [
"1.1.1.0-1.1.1.1",
"3.3.3.6",
"abcd",
"1.1.1.3"
],
"CompareList": [
"3.3.3.2",
"bcde"
]
}
}
Human Readable Output
Results
BaseList CompareList 1.1.1.0-1.1.1.1,
3.3.3.6,
abcd,
1.1.1.33.3.3.2,
bcde
commonfields: id: CompareIndicators version: -1 name: CompareIndicators fromversion: 6.0.0 script: '' type: python tags: [] comment: Find the differences between two indicators lists. enabled: true args: - name: base_list required: true description: Either a list of Indicators of Compromise or an EntryID to a File containing a list. isArray: true - name: compare_to_list required: true description: Either a list of Indicators of Compromise or an EntryID to a File containing a list. isArray: true outputs: - contextPath: IndicatorsCompare.BaseList description: Indicators that appear in the first indicators list only. type: String - contextPath: IndicatorsCompare.CompareList description: Indicators that appear in the second indicators list only. type: String scripttarget: 0 subtype: python3 dockerimage: demisto/netutils:1.0.0.10187688 runas: DBotWeakRole tests: - No test