Cisco Threat Response - List Response Actions
This atomic belongs to the Cisco Threat Response atomic group.
Gets a list of available "response" actions from Threat Response for the given observable. The actions available will depend on the type of observable and which modules you have enabled.
Target: SecureX APIs or HTTP Endpoint for "visibility.amp.cisco.com" with a path of "/iroh"
Account Key: None (uses a token)
Steps:
[] Generate the observable JSON
[] Generate the authorization header
[] Request a list of available actions from Threat Response
[] Check if the request was successful:
[]> If it was, extract the list of responses and set the output variable
[]> If it wasn't, return an error
More information about this API: https://visibility.amp.cisco.com/iroh/iroh-response/index.html#/Response/post_iroh_iroh_response_respond_observables