Bulk Indicator

Hello ade,

File Content Content solution pack will help you achieve this 

https://fortisoar.contenthub.fortinet.com//detail.html?entity=file-content-extraction&version=1.0.3&type=connector

Hello adem,

Herein is the guide to solving the problem, the assumption is the bulk ip IOC's are on the excel.

i) Upload the excel with the Ioc'S/ips on the resources>attachments  modules and save

ii) Create a playbook names enrich_ip and add manual start trigger that require no input.

iii) Using excel connector, >  list sheets > iput file IRI as recordID

iv) Using excel connector, read the sheet that contains the IOC's. Define the sheet name as the previous step output

v) Using the threat intel connector i.e Virus Total connector loop through the previous step output(List of Extracted ips/IOCs) and get the reputation.

vi) locate the Uploaded excel document with IOCs/IPS under resources>attachments

vii) At the bottom left,locate the created enrich_ip playbook and execute