Cyren-Find-Similar-Incidents

Finds similar incidents by Cyren Case ID This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: - For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script

python · Cyren Inbox Security

Details

IDCyren-Find-Similar-Incidents
Languagepython
From Version6.0.0
Docker Imagedemisto/python3:3.12.8.3296088
Tagsdedup duplicate incidents dynamic-section

README

Finds similar incidents by Cyren Case ID

Permissions


This automation runs using the default Limited User role, unless you explicitly change the permissions.
For more information, see the section about permissions here: For Cortex XSOAR 6, see the https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations for Cortex XSOAR 8 Cloud, see the https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script for Cortex XSOAR 8 On-prem, see the https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script.

Script Data


Name Description
Script Type python3
Tags dedup, duplicate, incidents, dynamic-section
Cortex XSOAR Version 6.0.0

Inputs


Argument Name Description
case_id the case id of incidents to return

Outputs


Path Description Type
cyrenSimilarIncident.raw_id Similar incident ID. string
cyrenIsSimilarIncidentFound Whether a similar incident was found (“true” or “false”). boolean
cyrenSimilarIncident Similar incident. unknown
cyrenSimilarIncident.name Similar incident name. string
cyrenSimilarIncidentList an array if similar incidents Unknown
cyrenSimilarIncidentCsv comma separated raw ids Unknown

Script Example


## Context Example

```json
{
    "isSimilarIncidentFound": false
}

Human Readable Output

No similar incidents have been found.

args:
- description: the case id of incidents to return.
  name: case_id
comment: |-
  Finds similar incidents by Cyren Case ID

  This automation runs using the default Limited User role, unless you explicitly change the permissions.
  For more information, see the section about permissions here:
  - For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations 
  - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script
  - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
commonfields:
  id: Cyren-Find-Similar-Incidents
  version: -1
dockerimage: demisto/python3:3.12.8.3296088
enabled: true
name: Cyren-Find-Similar-Incidents
outputs:
- contextPath: cyrenSimilarIncident.raw_id
  description: Similar incident ID.
  type: string
- contextPath: cyrenIsSimilarIncidentFound
  description: Whether a similar incident was found ("true" or "false").
  type: boolean
- contextPath: cyrenSimilarIncident
  description: Similar incident.
  type: unknown
- contextPath: cyrenSimilarIncident.name
  description: Similar incident name.
  type: string
- contextPath: cyrenSimilarIncidentList
  description: an array if similar incidents.
  type: Unknown
- contextPath: cyrenSimilarIncidentCsv
  description: comma separated raw ids.
  type: Unknown
script: ''
scripttarget: 0
subtype: python3
tags:
- dedup
- duplicate
- incidents
- dynamic-section
timeout: 300ns
type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)