Filter Allowlisted Observables activity

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • The Filtered Allowlisted Observables workflow activity removes observables that can be ignored from the list of observables. This activity can accelerate the investigation and remediation process.

    The Filter Allowlisted Observables activity can be used with any workflow to filter observables prior to taking any action.

    Results

    Possible results for this activity are:

    Table 1. Results
    Result Description
    Success Filter list created.
    Failure An error occurred while attempting to filter the observables. More error information is available in the activity output error.

    Input variables

    Input variables determine the initial behavior of the activity.

    Variable Description
    observables List of available observables.

    Output variables

    The output variables contain data that can be used in subsequent activities.

    Table 2. Output variables
    Variable Description
    filteredObservables Filtered observables.