Kelby Shelton b1688fd2ec Made required changes. See description. ...

Playbook is failing when only some reputation results were returned.

These are the changes I made, since we don't want to delay this by waiting for another attack range:
1. Added a filter block after "filter successful observable output."
2. Adding the filter negates the need to do a custom code block before the format. Removed custom code.
3. Rename "filter successful observable output" to "observable output decision," because its not actually filtering. Its just a decision.
4. Reword "observable output of detonation playbooks not exits" to "No observable output exists for dispatched playbooks."
5. Switched beginning decision to filter and routed the filtered artifact IDs to the playbook.

2023-04-29 16:43:09 -05:00

115 KiB

1052x1592px

Raw Permalink History