Darktrace /NETWORK - Create PCAP File
This atomic belongs to the Darktrace /NETWORK atomic group.
Requests a PCAP file be generated from traffic observed by Darktrace. If using a user-based API token, the user must have the "Create PCAPs" permission.
Target: Darktrace /NETWORK integration target or HTTP Endpoint for "your-tenant.cloud.darktrace.com" with no path
Account Key: None if using an integration-provided target, public and private tokens if using an HTTP Endpoint target
Steps:
[] Check that the timeframe is 30 minutes or less
[] Build the request payload and authorization headers
[] Send the request to Darktrace
[] Check if the request was successful:
[]> If it was, attempt to extract the filename and set the output variables
[]> If it wasn't, return an error
More information about this API: https://portal.darktrace.com/product-guides/main