Filter Whitelisted Observables activity

The Filtered Whitelisted Observables workflow activity removes observables that can be ignored from the list of observables. This activity can accelerate the investigation and remediation process.

The Filter Whitelisted Observables activity can be used with any workflow to filter observables before any other action.

Results

Possible results for this activity are:

Table 1. Results
Result Description
Success Filter list created.
Failure An error occurred while attempting to filter the observables. More error information is available in the activity output error.

Input variables

Input variables determine the initial behavior of the activity.

Variable Description
observables List of available observables.

Output variables

The output variables contain data that can be used in subsequent activities.

Table 2. Output variables
Variable Description
filteredObservables Filtered observables.