Details

This atomic belongs to the Cisco XDR: SSX atomic group.

Gets a list of devices registered with Cisco Security Services Exchange (SSX) using the Cisco XDR SSX proxy.

Target: Platform APIs system target or an HTTP Endpoint for "visibility.amp.cisco.com" with a path of "/iroh"

Account Key: None (uses an access token)

Steps:

  • Process the workflow input
  • Request a list of devices from XDR
  • Check if the request was successful:
    • If it was, set the output variable
    • If it wasn't, return an error

More information about this API: https://visibility.amp.cisco.com/iroh/iroh-sse/index.html#/SSE/get_iroh_iroh_sse_device

About
Authorship
Cisco Managed