Configuration file to playbook

c.marlettalivi — Tue, 25 Oct 2022 14:47:28 GMT

Hi all,

I need to provide an externally uploaded configuration file to a playbook whose content varies periodically (it's a list of names). What is the best way to do this? The user who uploads the file can access the XSOAR GUI interface with an Analyst profile.

Re: Configuration file to playbook

jfernandes1 — Wed, 26 Oct 2022 00:38:46 GMT

Hi @c.marlettalivi, Depending on your use case there are multiple methods.

Option 1: The user does not need to login to XSOAR. We can send Data Collection task to the user. Data Collection tasks support file attachments.

Option 2: If the file is uploaded to a specific location. You can grab it with the correct integration. Remote Access if network location. Google Drive, Amazon S3 Bucket, etc.

Option 3: Create a task that halts playbook processing till a specific context key is created in your case it would be File. The analyst can then go to the warroom and upload the file.

topic Re: Configuration file to playbook in Cortex XSOAR Discussions

Configuration file to playbook

Re: Configuration file to playbook