Details

This atomic belongs to the Cisco XDR: Intelligence atomic group.

Fetches the contents of a Cisco XDR threat intelligence feed.

Target: Private Intelligence API system target

Steps:

  • Check which output format was provided:
    • If JSON, update the URL suffix
    • If something besides text or JSON, end the workflow
  • Build the request query string
  • Fetch the feed contents
  • Check if the request was successful:
    • If it was, set the output variable
    • If it wasn't, return an error

More information about this API: https://private.intel.amp.cisco.com/index.html#/Feed/get_ctia_feed__id__view

About
Authorship
Cisco Managed