This workflow template streamlines case management by automating the process of handling new URL observables in Torq. Upon addition of a URL, it attempts to generate a screenshot, which is then attached to the relevant case if successful. Additionally, it defangs the URL and updates the case with a comment on the screenshot's status, enhancing documentation and facilitating efficient incident response.
Use Cases
Case Management
Workflow Breakdown
Receive a trigger when a new Observable is added.
If a URL is provided, attempt to generate a screenshot of the URL
If successful, add the screenshot as an attachment
Add a comment with the defanged url and provide the status of the screenshot attachment.
Vendors
Utils, Torq Cases
Workflow Output
An screenshot attachment of the URL.