TIM - Process Indicators Against Business Partners URL List

This playbook processes indicators to check if they exist in a Cortex XSOAR list containing business partner urls, and tags the indicators accordingly. To enable the playbook, provide a Cortex XSOAR list name containing business partner urls.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

  • FilterByList
  • SetAndHandleEmpty

Commands

  • appendIndicatorField

Playbook Inputs


NameDescriptionDefault ValueRequired
Indicator QueryIndicators matching the indicator query will be used as playbook inputOptional
BusinessPartnersUrlListNameA Cortex XSOAR list containing business partner url values. Url Indicators that appear in the list are tagged as business partners.Optional

Playbook Outputs


PathDescriptionType
BusinessPartnerUrlURLs that are found in the business partner url list.string
NotBusinessPartnerUrlURLs that are not found in the business partner url list.string

Playbook Image


Playbook Image