DsSearchQueryArray

Combines an array of queries to as few as possible whilst staying under the maximum term count.

python · ReliaQuest Digital Risk Protection

Details

IDDsSearchQueryArray
Languagepython
From Version6.0.0
Docker Imagedemisto/python3:3.12.13.10116658
Tagstransformer

README

Combines an array of queries to as few as possible whilst staying under the maximum term count.

Script Data


Name Description
Script Type python3
Tags transformer
Cortex XSOAR Version 6.0.0

Inputs


Argument Name Description
field Input field to extract data from for e.g. IP.Address

Outputs


Outputs an array of query or a single query string.

commonfields:
  id: DsSearchQueryArray
  version: -1
name: DsSearchQueryArray
script: ''
type: python
tags:
- transformer
comment: Combines an array of queries to as few as possible whilst staying under the maximum term count.
enabled: true
args:
- description: SHA-1 hashes to include in query string.
  name: sha1
  isArray: true
- description: MD5 terms to include in query string.
  name: md5
  isArray: true
- description: SHA-256 hashes to include in query string.
  name: sha256
  isArray: true
- description: domains to include in query string.
  name: domain
  isArray: true
- description: IP addresses to include in query string.
  name: ip
  isArray: true
- description: URLs to include in query string.
  name: url
  isArray: true
- description: CVE identifiers to include in query string.
  name: cve
  isArray: true
scripttarget: 0
subtype: python3
dockerimage: demisto/python3:3.12.13.10116658
runas: DBotWeakRole
fromversion: 6.0.0
tests:
- DsSearchQueryArray_test.py