Cisco Secure Access - Remove Observable from Destination List

This workflow appears in the pivot menu and allows a user to remove an observable from the configured destination list in Cisco Secure Access. Supported observables: domain, IP, URL.

Target: Cisco Secure Access

Steps:

• Loop through each page of destination lists:
  • Get this page of lists
  • Parse the results to see if a matching list was found
  • Check if a matching list was found:
    • If it was, remove the observable from that list and end the workflow
  • Check if there are more pages of lists:
    • If there are, continue to the next page
    • If there aren't, end the workflow