CreateUseCaseStepsList
python · Use Case Builder
Source
import demistomock as demisto # noqa: F401 from CommonServerPython import * # noqa: F401 usecasestepsdata = """{ "URL Enrichment": { "type": "playbook", "name": "URL Enrichment - Generic v2" }, "IP Enrichment": { "type": "playbook", "name": "IP Enrichment - Generic v2" }, "User Enrichment": { "type": "playbook", "name": "Account Enrichment - Generic v2.1" }, "Host Enrichment": { "type": "playbook", "name": "Endpoint Enrichment - Generic v2.1" }, "Domain Enrichment": { "type": "playbook", "name": "Domain Enrichment - Generic v2" }, "Email Address Enrichment": { "type": "playbook", "name": "Email Address Enrichment - Generic v2.1" }, "File Enrichment": { "type": "playbook", "name": "File Enrichment - Generic v2" }, "Entity Enrichment": { "type": "playbook", "name": "Entity Enrichment - Generic v4" }, "Email Notifications": { "type": "header", "name": "Email Notifications" }, "Chat App Notifications": { "type": "header", "name": "Chat App Notifications" }, "Ticketing": { "type": "header", "name": "Ticketing" }, "Timeline": { "type": "header", "name": "Timeline" }, "Analyst Notes": { "type": "header", "name": "Analyst Notes" }, "Lock AD user account": { "type": "playbook", "name": "Block Account - Generic v2" }, "Lock AD service account": { "type": "playbook", "name": "Block Account - Generic v2" }, "EDL Block (IP/Domain/URL)": { "type": "playbook", "name": "Block Indicators - Generic v3" }, "PAN-DB re-categorization": { "type": "playbook", "name": "PAN-OS - Block URL - Custom URL Category" }, "Block email sender": { "type": "playbook", "name": "Block Email - Generic v2" }, "Quarantine email": { "type": "playbook", "name": "Search And Delete Emails - Generic v2" }, "Quarantine files": { "type": "playbook", "name": "Block File - Generic v2" }, "Quarantine device": { "type": "playbook", "name": "Isolate Endpoint - Generic V2" }, "Disable project": { "type": "playbook", "name": "Cloud Response - Generic" }, "Re-image request": { "type": "header", "name": "Re-image request" }, "Password Reset": { "type": "header", "name": "Password Reset" }, "Search and destroy": { "type": "header", "name": "Search and destroy" }, "External website takedown": { "type": "header", "name": "External website takedown" }, "Revoke physical badge access": { "type": "header", "name": "Revoke physical badge access" }, "Kill sessions": { "type": "header", "name": "Kill sessions" }, "Calculate Severity": { "type": "playbook", "name": "Calculate Severity - Generic v2" } } """ demisto.executeCommand("createList", {"listName": "UseCaseSteps", "listData": usecasestepsdata})