Unique Files From File Object

T.SOARSupport — Wed, 28 Aug 2024 09:29:09 GMT

Dear All,

I am currently optimizing the phishing playbook and have encountered some issues with the detonation and enrichment processes that handle file objects. I noticed that duplicate files are being passed to the sub-playbooks. I attempted to use a unique function to filter out these duplicates, but it didn't work as expected. I have two files with duplicate entries

#playbook

Re: Unique Files From File Object

ZuleyhaAy — Thu, 29 Aug 2024 13:05:14 GMT

Hi,
Maybe you can make use of DT language. The value below printing the entry ids with unique names

${.=(val.File instanceof Array ? Array.from(new Map(val.File.map(file => [file.Name, file.EntryID])).values()).join(", ") : val.File.EntryID)}

topic Unique Files From File Object in Cortex XSOAR Discussions

Unique Files From File Object

Re: Unique Files From File Object