Details

This atomic belongs to the Cisco Threat Response atomic group.

Creates a new Threat Response relationship in your private intelligence store.

Target: SecureX Private Intelligence API or HTTP Endpoint for "private.intel.amp.cisco.com"

Account Key: None (uses a token)

Steps:
[] Generate the JSON for the new relationship
[] Generate the authorization header
[] POST the relationship JSON to Threat Response
[] Check if the relationship was created:
[]> If it was, extract the relationship ID and set the output variable
[]> If it wasn't, return an error

More information about this API: https://private.intel.amp.cisco.com/index.html#/Relationship/post_ctia_relationship

About
Authorship
Cisco Managed