XDR - Investigate - Deliberate Observables
Details
This atomic belongs to the Cisco XDR: Investigate atomic group.
Uses the Cisco XDR API to get verdicts for observables.
Target: Platform APIs
Steps:
[] Generate the observable JSON
[] Request verdict information from Cisco XDR
[] Check if the request was successful:
[]> If it was, extract the results and set the output variable
[]> If it wasn't, return an error
More information about this API: https://developer.cisco.com/docs/cisco-xdr/get-observable-verdicts/
About
Authorship
Cisco Managed