Problem with white spaces in command input

gkindley — Thu, 08 Sep 2022 20:51:15 GMT

When I try to put a filepath that has white spaces as an input in the command "cs-falcon-rtr-remove-file", I receive the following error:

CrowdStrike Falcon The command was failed with the errors: {'d5716ded5d214d61a23884dd9ef64078': 'Max args is 1. 5 were provided'}

The complete command used and retrieved from the warrom looks like this:

!cs-falcon-rtr-remove-file host_ids="<numeric host id>" file_path="\\Path\\To\\The\\File\\A\\Directory with whitespaces\\Directory\\Directory2with whitespaces \\File.exe" os="Windows"

(I replace the original path with some placeholder). I notice that taking into consideration the whitespaces, the filepath is split into 5 pieces, getting the mentioned error.

How can I escape the whitespaces? I tried with \ before the spaces, but it's not considered when the command is running, and \s is escaped as \\s, making a bad filepath.

The command comes from Crowdstrike Falcon Content Pack, and is implemented in the "CrowdStrike Falcon - True Positive Incident Handling" Playbook.

I really appreciate any help, regards.

Re: Problem with white spaces in command input

cstone — Thu, 08 Sep 2022 21:21:54 GMT

Can you try putting back ticks around the file path like this: file_path=`"\\Path\\To\\The\\File\\A\\Directory with whitespaces\\Directory\\Directory2with whitespaces \\File.exe"`

Re: Problem with white spaces in command input

gkindley — Thu, 08 Sep 2022 21:55:59 GMT

putting ` characters around filepath work well in cli, but how can I use that in Playbook tasks? thanks for your help.

topic Re: Problem with white spaces in command input in Cortex XSOAR Discussions

Problem with white spaces in command input

Re: Problem with white spaces in command input

Re: Problem with white spaces in command input