topic Re: Wildfire IOC lookup via Teams Chatbot/PowerAutomate in Automation/API Discussions

Wildfire IOC lookup via Teams Chatbot/PowerAutomate

Chris.Marshall — Thu, 03 Nov 2022 20:49:37 GMT

I'm trying to build a simple MS Teams chat bot that queries Wildfire via HTTP POST requests. It appears to be accepting the apikey when I set it as a query (since I get an HTTP 400 in response), but I'm not doing something correctly, as I get a "The request could not be filled due to bad syntax. (400)" response. Anyone have any experience or suggestions?

Re: Wildfire IOC lookup via Teams Chatbot/PowerAutomate

JimmyHolland — Tue, 08 Nov 2022 17:51:41 GMT

Hi @Chris.Marshall,

The docs for the call you are making (/submit/link) are here, and it works ok for me in Postman, so it must be something specific to that API client you are using. Maybe move the agent parameter, as it is currently in the headers? In fact, I'm using the body for the parameters, not the query params:

Hope that helps!