DSPMExtractUserResponseFromSlackBlockState
This script processes user responses from a Slack block interaction, determining the appropriate action based on the selected option (either creating a Jira ticket or remediating a risk). It extracts relevant project details and ticket types from the user input, sets the necessary context in XSOAR, and handles errors gracefully.
python · DSPM
Details
| ID | DSPMExtractUserResponseFromSlackBlockState |
|---|---|
| Language | python |
| From Version | 6.10.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
README
This script processes user responses from a Slack block interaction, determining the appropriate action based on the selected option (either creating a Jira ticket or remediating a risk). It extracts relevant project details and ticket types from the user input, sets the necessary context in XSOAR, and handles errors gracefully.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Cortex XSOAR Version | 6.10.0 |
Inputs
| Argument Name | Description |
|---|---|
| incident_data | Incident data of a specific asset. |
| SlackBlockState | The state of the response from the user will be stored under this context path. |
Outputs
| Path | Description | Type |
|---|---|---|
| User.Action | Unknown | |
| User.JiraProjectName | Unknown | |
| User.JiraTicketType | Unknown |
commonfields: id: DSPMExtractUserResponseFromSlackBlockState version: -1 name: DSPMExtractUserResponseFromSlackBlockState script: '' type: python tags: [] comment: This script processes user responses from a Slack block interaction, determining the appropriate action based on the selected option (either creating a Jira ticket or remediating a risk). It extracts relevant project details and ticket types from the user input, sets the necessary context in XSOAR, and handles errors gracefully. enabled: true args: - name: incident_data required: true description: Incident data of a specific asset. isArray: true - name: SlackBlockState description: The state of the response from the user will be stored under this context path. outputs: - contextPath: User.Action description: "" - contextPath: User.JiraProjectName description: "" - contextPath: User.JiraTicketType description: "" scripttarget: 0 subtype: python3 runonce: false dockerimage: demisto/python3:3.12.13.10116658 runas: DBotWeakRole engineinfo: {} fromversion: 6.10.0 tests: - No tests (auto formatted)