GoogleSecOpsSyncCaseInformation

Syncs the latest case information, related alerts and alert entities from Google SecOps and updates the Cortex XSOAR incident data.

python · Google SecOps

Details

ID	`GoogleSecOpsSyncCaseInformation`
Language	python
From Version	6.10.0
Docker Image	`demisto/python3:3.12.13.10404775`

README

Syncs the latest case information, related alerts and alert entities from Google SecOps and updates the Cortex XSOAR incident data.

Script Data

Name	Description
Script Type	python3
Cortex XSOAR Version	6.10.0

Inputs

Argument Name	Description
case_id	Specify the ID of the Google SecOps Case to sync. Note: If not provided, the script will try to retrieve it from the incident context.
alert_page_size	Specify the maximum number of alerts to retrieve. Note: Maximum value is 1000.
entity_page_size	Specify the maximum number of entities to retrieve per alert. Note: Maximum value is 1000.

Outputs

There are no outputs for this script.

Source

GoogleSecOpsSyncCaseInformation.py GoogleSecOpsSyncCaseInformation_test.py GoogleSecOpsSyncCaseInformation.yml

Download History Raw

commonfields:
  id: GoogleSecOpsSyncCaseInformation
  version: -1
name: GoogleSecOpsSyncCaseInformation
script: ''
type: python
subtype: python3
tags: []
comment: Syncs the latest case information, related alerts and alert entities from Google SecOps and updates the Cortex XSOAR incident data.
enabled: true
args:
- name: case_id
  description: "Specify the ID of the Google SecOps Case to sync.\n\nNote: If not provided, the script will try to retrieve it from the incident context."
- name: alert_page_size
  description: "Specify the maximum number of alerts to retrieve.\n\nNote: Maximum value is 1000."
  defaultValue: '1000'
- name: entity_page_size
  description: "Specify the maximum number of entities to retrieve per alert.\n\nNote: Maximum value is 1000."
  defaultValue: '1000'
outputs: []
scripttarget: 0
dependson:
  must: []
timeout: 600ns
runonce: false
dockerimage: demisto/python3:3.12.13.10404775
runas: DBotWeakRole
engineinfo: {}
fromversion: 6.10.0
tests:
- No tests (auto formatted)