GetIndicatorDBotScore
Add into the incident's context the system internal DBot score for the input indicator.
python · Common Scripts
Details
| ID | GetIndicatorDBotScore |
|---|---|
| Language | python |
| From Version | 5.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Tags | DBot Enrichment |
README
Add into the incident’s context the system internal DBot score for the input indicator.
Script Data
| Name | Description |
|---|---|
| Script Type | python2 |
| Tags | DBot, Enrichment |
| Cortex XSOAR Version | 5.0.0 |
Used In
This script is used in the following playbooks and scripts.
- DBot Indicator Enrichment - Generic
Inputs
| Argument Name | Description |
|---|---|
| indicator | The indicator to get the reputation of. Only system indicator types are supported. In order to send multiple indicators, use either a list or a JSON formatted string representation (e.g., ["indicator1", "indicator2"]). |
Outputs
| Path | Description | Type |
|---|---|---|
| DBotScore.Indicator | The indicator. | string |
| DBotScore.Type | The indicator type. | string |
| DBotScore.Vendor | The DBot score vendor. | string |
| DBotScore.Score | The DBot score. | number |
args: - default: true description: The indicator to get the reputation of. Only system indicator types are supported. isArray: true name: indicator required: true comment: Add into the incident's context the system internal DBot score for the input indicator. commonfields: id: GetIndicatorDBotScore version: -1 name: GetIndicatorDBotScore outputs: - contextPath: DBotScore.Indicator description: The indicator. type: string - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The DBot score vendor. type: string - contextPath: DBotScore.Score description: The DBot score. type: number script: '-' system: true tags: - DBot - Enrichment timeout: '0' type: python subtype: python3 fromversion: 5.0.0 tests: - GetIndicatorDBotScore Test dockerimage: demisto/python3:3.12.13.10116658