Details

This atomic belongs to the Cisco Secure Firewall (SSE) atomic group.

Searches for objects of the given type with the given value. Supported object types: fqdns, hosts, networks, ports, urls

Note: This atomic is for use with the SecureX SSE API proxy. For more information about how this works, see: https://ciscosecurity.github.io/sxo-05-security-workflows/workflows/secure-firewall/api-types

Target: HTTP Endpoint for "visibility.amp.cisco.com" with a path of "/iroh"

Account Key: None (uses an access token)

Steps:
[] Build the initial URL to request
[] Loop through each page of objects
[]> Generate the JSON payload
[]> Send the API request to the SSE API proxy
[]> Check if the request was successful (if not, return an error)
[]> Check if the proxied request was successful:
[]>> If it wasn't, return an error
[]> Check if a matching object was found:
[]>> If it was, set the output variables and end the loop
[]>> If it wasn't:
[]>>> Check for a next page
[]>>>> If there's a next page, update the local URL variable and continue
[]>>>> If there isn't a next page, end the workflow

About
Authorship
Cisco Managed