Hello, In some data ingestion steps that are relying on pagination (
OpenCTI "Get Indicators" action for instance ), while using for loop in
playbook step, we need to provide the output variable of one loop as an
input for the next loop to be execute...
Hey, I guess if VT doing deep analysis, it will provide result in couple
of minutes or hours after, it's depends, reason why you have to wait the
result till it's "completed" ( by using a "wait" step for checking again
)I guess for such kind of sandb...
@Anonymous , additional info : if I remember well "value" field does not
exist on the OpenCTI GraphQL API for Hash type, we have to rely on
"hashes.(removed lower than sign here)hash type(removed the great than
sign here)" , otherwise, the ouput for ...