CortexXDRInvestigationVerdict
This widget displays the incident verdict based on the 'Verdict' field.
python · Cortex XDR by Palo Alto Networks
Source
import demistomock as demisto # noqa: F401 from CommonServerPython import * # noqa: F401 RED_HTML_STYLE = "color:#FF1744;text-align:center;font-size:300%;>" GREEN_HTML_STYLE = "color:#00CD33;text-align:center;font-size:300%;>" GREY_HTML_STYLE = "color:#808080;text-align:center;font-size:300%;>" def main(): investigationverdict = demisto.context().get("Verdict") if investigationverdict == "Malicious": html = f"<h1 style={RED_HTML_STYLE}Malicious</h1>" elif investigationverdict == "Benign": html = f"<h1 style={GREEN_HTML_STYLE}Benign</h1>" else: html = f"<h1 style={GREY_HTML_STYLE}Not Determined</h1>" demisto.results({"ContentsFormat": formats["html"], "Type": entryTypes["note"], "Contents": html}) if __name__ in ["__main__", "builtin", "builtins"]: main()
README
This script displays the incident verdict based on the ‘Verdict’ field.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | dynamic-section |
| Cortex XSOAR Version | 6.9.0 |
Inputs
There are no inputs for this script.
Outputs
There are no outputs for this script.