GetIndicatorDBotScoreFromContext
Get the final verdict from the DBotScore of the context. Provided that it has all of the latest source verdict, this script gives you the right final verdict.
python · Community Common Scripts
Details
| ID | GetIndicatorDBotScoreFromContext |
|---|---|
| Language | python |
| From Version | 6.5.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Tags | Utility |
README
Get the final verdict of a indcator from the given DBotScores in the context by their reliability.
Provided that it has all of the latest source verdict, this script gives you the right final verdict.
Note that the result is calculated by the context data and not given from the database.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | Utility |
| Cortex XSOAR Version | 6.5.0 |
Inputs
| Argument Name | Description |
|---|---|
| indicator_value | The indicator value |
Outputs
| Path | Description | Type |
|---|---|---|
| FinalDBotScore.Indicator | The indicator value | string |
| FinalDBotScore.Score | The indicator score | number |
| FinalDBotScore.Type | The indicator type | string |
| FinalDBotScore.Vendor | The source vendor of the verdict | string |
| FinalDBotScore.Reliability | The reliability of the indicator verdict | string |
commonfields: id: GetIndicatorDBotScoreFromContext version: -1 name: GetIndicatorDBotScoreFromContext script: '' type: python tags: - Utility comment: |- Get the final verdict from the DBotScore of the context. Provided that it has all of the latest source verdict, this script gives you the right final verdict. enabled: true args: - name: indicator_value required: true description: The indicator value. outputs: - contextPath: FinalDBotScore.Indicator description: The indicator value. type: string - contextPath: FinalDBotScore.Score description: The indicator score. type: number - contextPath: FinalDBotScore.Type description: The indicator type. type: string - contextPath: FinalDBotScore.Vendor description: The source vendor of the verdict. type: string - contextPath: FinalDBotScore.Reliability description: The reliability of the indicator verdict. type: string scripttarget: 0 subtype: python3 dockerimage: demisto/python3:3.12.13.10116658 runas: DBotWeakRole fromversion: 6.5.0 tests: - No tests (auto formatted)