4 Commits

Author SHA1 Message Date
ljstella 7b6dab17f4 SOARHELP-6700 2026-04-28 10:47:57 -04:00
Kelby Shelton 6542f1afa3 Fixed reference to different playbook. 2023-04-29 16:56:39 -05:00
Kelby Shelton b1688fd2ec Made required changes. See description.
Playbook is failing when only some reputation results were returned.

These are the changes I made, since we don't want to delay this by waiting for another attack range:
1. Added a filter block after "filter successful observable output."
2. Adding the filter negates the need to do a custom code block before the format. Removed custom code.
3. Rename "filter successful observable output" to "observable output decision," because its not actually filtering. Its just a decision.
4. Reword "observable output of detonation playbooks not exits" to "No observable output exists for dispatched playbooks."
5. Switched beginning decision to filter and routed the filtered artifact IDs to the playbook.
2023-04-29 16:43:09 -05:00
Kelby Shelton 5c3d8b4125 Rename playbooks and minor grammatical changes in .yml 2023-04-29 16:06:17 -05:00