HuntingFromIndicatorLayout

This automation creates an incident from the indicator layouts Malware, Campaign and Intrusion set, with the following parameters: - Name: Threat Hunting Session - <Indicator Value> - Type: Proactive Threat Hunting - sdoname: <Indicator Value>.

python · Proactive Threat Hunting

Details

ID	`HuntingFromIndicatorLayout`
Language	python
From Version	6.9.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	indicator-action-button

Source

HuntingFromIndicatorLayout.py HuntingFromIndicatorLayout_test.py HuntingFromIndicatorLayout.yml

Download History Raw

commonfields:
  id: HuntingFromIndicatorLayout
  version: -1
name: HuntingFromIndicatorLayout
script: ''
type: python
tags:
- indicator-action-button
comment: |-
  This automation creates an incident from the indicator layouts Malware, Campaign and Intrusion set, with the following parameters:
  - Name: Threat Hunting Session - <Indicator Value>
  - Type: Proactive Threat Hunting
  - sdoname: <Indicator Value>.
enabled: true
scripttarget: 0
subtype: python3
runonce: false
dockerimage: demisto/python3:3.12.13.10116658
runas: DBotWeakRole
fromversion: 6.9.0
tests:
- No tests (auto formatted)