Skip to content

Extract indicators from file generic v2 add csv support #41393

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Oct 8, 2025
Merged

Extract indicators from file generic v2 add csv support #41393

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ccda36b
Added CSV support in text-based extraction tasks
idovandijk Sep 21, 2025
a7b658b
rn
idovandijk Sep 21, 2025
6c51b16
Merge branch 'master' into extract-indicators-from-file-generic-v2-ad…
idovandijk Oct 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
46 changes: 41 additions & 5 deletions Packs/CommonPlaybooks/Playbooks/playbook-Extract_Indicators_From_File_-_Generic_v2_4_5.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -171,10 +171,10 @@ tasks:
isautoswitchedtoquietmode: false
"5":
id: "5"
taskid: 1f1bd979-a81c-4d02-8a7e-d039839c0f11
taskid: 615974ba-0088-4aed-92bf-80613b251d49
type: condition
task:
id: 1f1bd979-a81c-4d02-8a7e-d039839c0f11
id: 615974ba-0088-4aed-92bf-80613b251d49
version: -1
name: Is there a text-based file?
description: Checks if there is a text-based file in context. Skips MSG and EML files.
Expand Down Expand Up @@ -230,6 +230,24 @@ tasks:
value:
simple: JSON data
ignorecase: true
- operator: containsString
left:
value:
simple: inputs.File.Type
iscontext: true
right:
value:
simple: CSV text
ignorecase: true
- operator: isEqualString
left:
value:
simple: inputs.File.Info
iscontext: true
right:
value:
simple: csv
ignorecase: true
- - operator: notContainsString
left:
value:
Expand Down Expand Up @@ -337,10 +355,10 @@ tasks:
isautoswitchedtoquietmode: false
"6":
id: "6"
taskid: 1da99193-16fa-4afe-8c81-6181adf34b7a
taskid: f2241e90-214f-4661-a5ea-0cc6769773bc
type: regular
task:
id: 1da99193-16fa-4afe-8c81-6181adf34b7a
id: f2241e90-214f-4661-a5ea-0cc6769773bc
version: -1
name: Extract indicators from text-based file
description: Extracts indicators from text-based files.
Expand Down Expand Up @@ -390,6 +408,24 @@ tasks:
value:
simple: JSON data
ignorecase: true
- operator: containsString
left:
value:
simple: inputs.File.Type
iscontext: true
right:
value:
simple: CSV text
ignorecase: true
- operator: isEqualString
left:
value:
simple: inputs.File.Info
iscontext: true
right:
value:
simple: csv
ignorecase: true
- - operator: notContainsString
left:
value:
Expand Down Expand Up @@ -2146,8 +2182,8 @@ tasks:
id: 8cae1b0c-df86-4070-83bc-2108b2fb3281
version: -1
name: Does ReadQRCode support the image?
description: Check if the image type is supported by the ReadQRCode script.
type: condition
description: ""
iscommand: false
brand: ""
nexttasks:
Expand Down
6 changes: 6 additions & 0 deletions Packs/CommonPlaybooks/ReleaseNotes/2_7_18.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Playbooks

##### Extract Indicators From File - Generic v2

- Added support to extract indicators from CSV files.
2 changes: 1 addition & 1 deletion Packs/CommonPlaybooks/pack_metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Common Playbooks",
"description": "Frequently used playbooks pack.",
"support": "xsoar",
"currentVersion": "2.7.17",
"currentVersion": "2.7.18",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Loading