Details

This atomic belongs to the ExtraHop Reveal(x) 360 atomic group.

Gets a list of devices on the watchlist from ExtraHop.

Target: ExtraHop integration target or HTTP Endpoint for "your-tenant.api.cloud.extrahop.com" with a path of "/api/v1"

Account Key: None if using an integration-provided target, access token if using an HTTP Endpoint target

Steps:
[] Build the authorization header
[] Request a list of watchlisted devices
[] Check if the request was successful:
[]> If it was, attempt to extract data and set the output variables
[]> If it wasn't, output an error

More information about this API: https://docs.extrahop.com/current/rx360-rest-api/#watchlist

About
Authorship
Cisco Managed