redactindicator

Redactindicator can help you to defang/redact any kind of indicator (IPv4, url, domain and email), IP addresses will be in the dotted representation like 8.8.8[.].8, all domains will be example[.]com. Optional you can define a "searchkey" which does not to be case sensitive, which will be replaced as <REDACTED>.

python · Community Common Scripts

Details

ID	`redactindicator`
Language	python
From Version	6.0.0
Docker Image	`demisto/python3:3.12.13.11879924`
Tags	transformer

README

Script Data

Name	Description
Script Type	python3
Tags

Inputs

Argument Name	Description
indicator
searchkey

Outputs

There are no outputs for this script.

Source

RedactIndicator.py RedactIndicator.yml

Download History Raw

args:
- description: Indicator to be redacted.
  name: value
- description: 'Indicator to be redacted (can be used instead of ''value'' for backwards compatibility).'
  name: indicator
- description: 'string which should be REDACTED.'
  name: searchkey
comment: Redactindicator can help you to defang/redact any kind of indicator (IPv4, url, domain and email), IP addresses will be in the dotted representation like 8.8.8[.].8, all domains will be example[.]com. Optional you can define a "searchkey" which does not to be case sensitive, which will be replaced as <REDACTED>.
commonfields:
  id: redactindicator
  version: -1
enabled: true
name: redactindicator
script: ''
subtype: python3
type: python
dockerimage: demisto/python3:3.12.13.11879924
runas: DBotWeakRole
fromversion: 6.0.0
tests:
- No tests (auto formatted)
engineinfo: {}
runonce: false
scripttarget: 0
tags:
- transformer