End-of-Life (EoL)

Add a Script in the Indicator Layout

Follow these instructions to add a script in the indicator layout. Dynamic Section layoutBuilder
You can add content to the indicator
Summary
tab, based on an automation script. You need to add the
General Purpose Dynamic Section
when editing indicator layouts.
The
General Purpose Dynamic Section
enables you to configure a section in the
Summary
tab from an automation script. The automation can return a simple text, markdown, or an HTML, the results of which appear in General Purpose Dynamic Section.
You can add any required information from an automation. For example:
  • Add a mapping script that determines where an IP address originates and displays it on a map.
  • Add a custom widget to the indicator page. The procedure is similar for indicators and incidents.
  • Add the
    FeedRelatedIndicator
    script from the
    Automation
    page, which contains information about the relationship between an indicator, entity (such as malware), and other indicators (such as a MITRE ATT&CK indicator), and connects externally to those indicators, if relevant.
Before you begin, you need to create an automation script.
  1. Select the indicator type or layout you want to add to the General Purpose Dynamic Section by completing steps 1 or 2 in Customize an Indicator Type Layout.
  2. Drag and drop the
    General Purpose Dynamic Section
    onto the page.
  3. Select the General Purpose Dynamic Section, click and then click
    Edit section settings
    .
  4. In the
    Name
    and
    Description
    fields, add a meaningful name and a description for the dynamic section that explains what the script displays.
  5. In the
    Automation script
    field, from the drop down list, select the script that returns data for the dynamic section.
    Only automations to which you have added the dynamic-indicator-section tag appear in the drop down list.
  6. Click
    OK
    .

Recommended For You