Details

This atomic belongs to the Palo Alto Cortex atomic group.

Removes one or more file hashes from the file block list in Palo Alto Cortex. Please refer to the Cortex documentation for information about required licenses and permissions.

Target: Palo Alto Cortex integration target or HTTP Endpoint for "api-your-instance.xdr.region.paloaltonetworks.com" with a path of "/public_api/v1"

Account Key: None if using an integration-provided target, API key and API key ID if using an HTTP Endpoint target

Steps:

  • Build the authorization headers and request payload
  • Request the hashes be removed
  • Check if the request was successful:
    • If it was, set the output variable
    • If it wasn't, output an error
About
Authorship
Cisco Managed