awesome-playbooks/playbooks/fortinet/Create IOC Extracted From CSV File.json at main · luduslibrum/awesome-playbooks · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
{
    "@type": "Workflow",
    "triggerLimit": null,
    "name": "Create IOC Extracted From CSV File",
    "aliasName": null,
    "tag": null,
    "description": "Create IOC extracted from CSV File",
    "isActive": false,
    "debug": false,
    "singleRecordExecution": false,
    "remoteExecutableFlag": false,
    "parameters": [
        "ioc_type",
        "ioc_batch"
    ],
    "synchronous": false,
    "collection": "\/api\/3\/workflow_collections\/3c3b049e-5ecb-464a-83f6-5af6a230c0ed",
    "versions": [],
    "triggerStep": "\/api\/3\/workflow_steps\/4a88ae1c-fe54-4791-a889-ce79bb4460b6",
    "steps": [
        {
            "@type": "WorkflowStep",
            "name": "Start",
            "description": null,
            "arguments": {
                "step_variables": {
                    "input": {
                        "params": []
                    }
                }
            },
            "status": null,
            "top": "40",
            "left": "40",
            "stepType": "\/api\/3\/workflow_step_types\/b348f017-9a94-471f-87f8-ce88b6a7ad62",
            "uuid": "4a88ae1c-fe54-4791-a889-ce79bb4460b6"
        },
        {
            "@type": "WorkflowStep",
            "name": "Create Indicator",
            "description": null,
            "arguments": {
                "for_each": {
                    "item": "{{vars.input.params['ioc_batch']}}",
                    "__bulk": true,
                    "parallel": false,
                    "condition": "",
                    "batch_size": 300
                },
                "resource": {
                    "tlp": {
                        "id": 297,
                        "@id": "\/api\/3\/picklists\/7bff95b7-6438-4b01-b23a-0fe8cb5b33d3",
                        "icon": null,
                        "uuid": "7bff95b7-6438-4b01-b23a-0fe8cb5b33d3",
                        "@type": "Picklist",
                        "color": "#FFBF00",
                        "display": "Amber",
                        "@context": "\/api\/3\/contexts\/Picklist",
                        "listName": "\/api\/3\/picklist_names\/40f1345f-f679-43c0-9237-5b06edd8385f",
                        "itemValue": "Amber",
                        "orderIndex": 1
                    },
                    "value": "{{vars.item}}",
                    "__replace": "false",
                    "reputation": {
                        "id": 171,
                        "@id": "\/api\/3\/picklists\/ae98ebc6-beef-4882-9980-1d88fc6d87cd",
                        "icon": null,
                        "uuid": "ae98ebc6-beef-4882-9980-1d88fc6d87cd",
                        "@type": "Picklist",
                        "color": "#696969",
                        "display": "TBD",
                        "listName": "\/api\/3\/picklist_names\/e75ed3c3-9f23-4a43-832b-0daf236209ba",
                        "itemValue": "TBD",
                        "orderIndex": 3
                    },
                    "indicatorStatus": {
                        "id": 369,
                        "@id": "\/api\/3\/picklists\/2f5cff61-fbff-4bb3-96be-302b78a9fb47",
                        "icon": null,
                        "uuid": "2f5cff61-fbff-4bb3-96be-302b78a9fb47",
                        "@type": "Picklist",
                        "color": null,
                        "display": "TBD",
                        "@context": "\/api\/3\/contexts\/Picklist",
                        "listName": "\/api\/3\/picklist_names\/e6639d57-94a9-432f-a46f-b2b530402077",
                        "itemValue": "TBD",
                        "orderIndex": 3
                    },
                    "typeofindicator": "{{\"IndicatorType\" | picklist(vars.input.params['ioc_type'], \"@id\")}}"
                },
                "_showJson": false,
                "operation": "Overwrite",
                "collection": "\/api\/3\/upsert\/indicators",
                "__recommend": [],
                "fieldOperation": {
                    "recordTags": "Overwrite"
                },
                "step_variables": []
            },
            "status": null,
            "top": "204",
            "left": "238",
            "stepType": "\/api\/3\/workflow_step_types\/2597053c-e718-44b4-8394-4d40fe26d357",
            "uuid": "90b7dd07-4b51-4714-a62a-d420d64c825f"
        }
    ],
    "routes": [
        {
            "@type": "WorkflowRoute",
            "name": "Start -> Create Indicator",
            "targetStep": "\/api\/3\/workflow_steps\/90b7dd07-4b51-4714-a62a-d420d64c825f",
            "sourceStep": "\/api\/3\/workflow_steps\/4a88ae1c-fe54-4791-a889-ce79bb4460b6",
            "label": null,
            "isExecuted": false,
            "uuid": "44fb86dd-9acf-424f-95c8-03d9f363bc6c"
        }
    ],
    "priority": "\/api\/3\/picklists\/2b563c61-ae2c-41c0-a85a-c9709585e3f2",
    "uuid": "19b13280-bfcb-4dcc-8e89-25cbe901def2",
    "owners": [],
    "isPrivate": false,
    "deletedAt": null,
    "recordTags": [
        "Subroutine"
    ]
}