This is a bunch of actions to automate TheHive alerts/cases/jobs processing.
Check example of webhook for usages.
Change status to InProgress for task_id
.
Change status to Completed for task_id
.
Look for task_name
in case_id
.
Create case from alert_id
with case_template
.
Create log in task_id
.
Run analyzer_name
on artifact_id
of case_id
.
An optional linked_task_name
parameter force to verify if a task exists in this case with this name and link the created job to this task.
Same as before but run on every artifacts of data_type
for case_id
.
Works only if job_id
was linked to a task_id
during run_analyzer
.