topic Trigger action each time an answer is received on data collection task in Cortex XSOAR Discussions

Trigger action each time an answer is received on data collection task

LBekaddour — Fri, 08 Mar 2024 13:21:28 GMT

Hi everyone,

I am trying to achieve the following scenario:

Send a form with data collection task, the form is closed after 4 weeks. The form asks for a hostname to contain within CrowdStrike

Every time someone answers the form, I want to contain the machine in CrowdStrike.

However, the task is in "waiting" mode in XSOAR. I am not sure how to achieve this scenario,

Thanks for your help,;;

Re: Trigger action each time an answer is received on data collection task

madani — Tue, 12 Mar 2024 11:08:09 GMT

Hello,

I also face to several issues with the behavior of the data collection. I don't think what you want to do is possible, because when someone answer to the data collection, the task will be considered as completed.

One solution can be to use recursive jobs or incident. When the data collection is completed and the machine contained, it will launch a new job or restart the playbook of the incident. But the link of data collection will be regenerated, which can be confusing for your end-user.