Run an analyzer on a case.

​
Parameters

ParameterDescription
Analyzer IDID of the cortex analyzer to use.
Case IDID of the case to analyze.
Cortex IDName of the cortex server from the configuration.

​
Example Output

{
	"_type": "case_artifact_job",
	"analyzerId": "bface6faa22029dcf81d5d817f27eb98",
	"analyzerName": "Abuse_Finder_3_0",
	"analyzerDefinition": "Abuse_Finder_3_0",
	"status": "Waiting",
	"startDate": 1630660394582,
	"endDate": 1630660394582,
	"cortexId": "Stable",
	"cortexJobId": "BP3uqnsB8Pn57ils_kFX",
	"id": "~1433604184"
}

​
Workflow Library Example

Run Analyzer with Thehive and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?