commonfields:
  id: ExtractAttackPattern
  version: -1
name: ExtractAttackPattern
comment: Extract Attack Pattern Threat Intel Object. After auto extract extracts the Attack Pattern IDs, this script is executed and extracts the value (name) of the Attack Pattern.
script: |
type: python
tags:
- indicator-format
enabled: true
args:
- name: input
  description: A comma-separated list of Attack Pattern IDs.
  default: true
  isArray: true
scripttarget: 0
subtype: python3
dockerimage: demisto/python3:3.12.13.10404775
runas: DBotWeakRole
tests:
- ExtractAttackPattern-Test
fromversion: 5.5.0
marketplaces:
- xsoar
- marketplacev2
- platform