Technical Tip: Import Assets/Indicators from a CSV

FortiSOAR Knowledge Base

FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.

Article Id 220025

Description

It is often necessary to import records from a CSV into FortiSOAR. This article describes how to accomplish this, it is possible to use the attached playbooks.

Scope

FortiSOAR.

Solution

Import the playbook collection from the playbook list (the JSON file needs to be extracted from the .zip prior to import).
Upload the CSV from the assets or indicators list using the no-record manual trigger.

The playbook can be modified to fit a differently formatted CSV by adjusting the 'Format data' step in the playbook to match the data format.

603

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.