Add a Script in the Indicator Layout
Follow these instructions to add a script in the indicator
layout. Dynamic Section layoutBuilder
You can add content to the indicator
Summary
tab,
based on an automation script. You need to add the General
Purpose Dynamic Section
when editing indicator layouts.The
General
Purpose Dynamic Section
enables you to configure a section
in the Summary
tab from an automation script.
The automation can return a simple text, markdown, or an HTML, the
results of which appear in General Purpose Dynamic Section. You
can add any required information from an automation. For example:
- Add a mapping script that determines where an IP address originates and displays it on a map.
- Add a custom widget to the indicator page. The procedure is similar for indicators and incidents.
- Add theFeedRelatedIndicatorscript from theAutomationpage, which contains information about the relationship between an indicator, entity (such as malware), and other indicators (such as a MITRE ATT&CK indicator), and connects externally to those indicators, if relevant.
Before
you begin, you need to create an automation script.
- Select the indicator type or layout you want to add to the General Purpose Dynamic Section by completing steps 1 or 2 in Customize an Indicator Type Layout.
- Drag and drop theGeneral Purpose Dynamic Sectiononto the page.
- Select the General Purpose Dynamic Section, click
and then
click Edit section settings. - In theNameandDescriptionfields, add a meaningful name and a description for the dynamic section that explains what the script displays.
- In theAutomation scriptfield, from the drop down list, select the script that returns data for the dynamic section.Only automations to which you have added the dynamic-indicator-section tag appear in the drop down list.
- ClickOK.
