How to Associate Artifacts to Case in a Workflow
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a month ago
I've developed a workflow that will automatically create a TISC Case when certain criteria is met with an ingested Threat Report. Is there a way to associate Artifacts (specifically Observables, Indicators, and the Threat Report itself) to the newly created Case from within the workflow?
Labels:
1 REPLY 1
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a month ago
If you can recognize the artifacts that need to be added, you can add them. But is it a workflow or a flow designer flow (you labeled it with both). It depends on what you are using to get the solution. Within the flow, some logic and lookups will suffice and within the workflow you will probably need to script it.
Please mark any helpful or correct solutions as such. That helps others find their solutions.
Mark