gistfile1.txt

{
"blockly": false,
"blockly_xml": "<xml></xml>",
"category": "Uncategorized",
"coa": {
"data": {
"description": "",
"edges": [
{
"id": "port_0_to_port_2",
"sourceNode": "0",
"sourcePort": "0_out",
"targetNode": "2",
"targetPort": "2_in"
},
{
"conditions": [
{
"index": 0
}
],
"id": "port_2_to_port_4",
"sourceNode": "2",
"sourcePort": "2_out",
"targetNode": "4",
"targetPort": "4_in"
},
{
"id": "port_4_to_port_1",
"sourceNode": "4",
"sourcePort": "4_out",
"targetNode": "1",
"targetPort": "1_in"
}
],
"hash": "e97f6a877258cf675d443d9b2d6820f70ddaf249",
"nodes": {
"0": {
"data": {
"advanced": {
"join": []
},
"functionName": "on_start",
"id": "0",
"type": "start"
},
"errors": {},
"id": "0",
"type": "start",
"warnings": {},
"x": 20,
"y": 0
},
"1": {
"data": {
"advanced": {
"join": []
},
"functionName": "on_finish",
"id": "1",
"type": "end"
},
"errors": {},
"id": "1",
"type": "end",
"warnings": {},
"x": 20,
"y": 476
},
"2": {
"data": {
"advanced": {
"customName": "filter for ip artifacts",
"customNameId": 0,
"join": []
},
"conditions": [
{
"comparisons": [
{
"conditionIndex": 0,
"op": "!=",
"param": "artifact:*.cef.destinationAddress",
"value": ""
},
{
"conditionIndex": 0,
"op": "!=",
"param": "artifact:*.cef.sourceAddress",
"value": ""
}
],
"conditionIndex": 0,
"customName": "address artifacts",
"logic": "or"
}
],
"functionId": 1,
"functionName": "filter_for_ip_artifacts",
"id": "2",
"type": "filter"
},
"errors": {},
"id": "2",
"type": "filter",
"warnings": {},
"x": 60,
"y": 140
},
"4": {
"data": {
"action": "lookup ip",
"actionType": "investigate",
"advanced": {
"join": []
},
"connector": "DNS",
"connectorConfigs": [
"cloudflare"
],
"connectorId": "876ab991-313e-48e7-bccd-e8c9650c239c",
"connectorVersion": "v1",
"functionId": 1,
"functionName": "lookup_ip_1",
"id": "4",
"parameters": {
"ip": "filtered-data:filter_for_ip_artifacts:condition_1:artifact:*.cef.destinationAddress"
},
"requiredParameters": [
{
"data_type": "string",
"field": "ip"
}
],
"tab": "byAction",
"type": "action"
},
"errors": {},
"id": "4",
"type": "action",
"warnings": {},
"x": 0,
"y": 320
}
},
"notes": ""
},
"input_spec": null,
"output_spec": null,
"playbook_type": "automation",
"python_version": "3",
"schema": "5.0.8",
"version": "5.5.0.108488"
},
"create_time": "2024-04-26T22:44:40.811508+00:00",
"draft_mode": false,
"labels": [
"*"
],
"tags": []
}