Wildfire IOC lookup via Teams Chatbot/PowerAutomate

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Wildfire IOC lookup via Teams Chatbot/PowerAutomate

L0 Member

I'm trying to build a simple MS Teams chat bot that queries Wildfire via HTTP POST requests. It appears to be accepting the apikey when I set it as a query (since I get an HTTP 400 in response), but I'm not doing something correctly, as I get a "The request could not be filled due to bad syntax. (400)" response. Anyone have any experience or suggestions? Screenshot 2022-11-03 164614.png


L5 Sessionator

Hi @Chris.Marshall,


The docs for the call you are making (/submit/link) are here, and it works ok for me in Postman, so it must be something specific to that API client you are using. Maybe move the agent parameter, as it is currently in the headers? In fact, I'm using the body for the parameters, not the query params:

Screenshot 2022-11-08 at 17.46.14.png


Hope that helps!

Help the community: "Like" helpful comments, and click "Accept as Solution" if you found your answer 🙂
  • 1 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!