the SOARCA python library is used locally from the repo because it is not yet updated on pypi.
changes made on the soarca library:
file: executor.py, line 142, added "as e:" -> "except RuntimeError as e:"
file: parser.py added code to provide default values of "constant" and "variables" fileds
case "command":
for var_param, _ in content["command"]["variables"].items():
for key in ["constant", "external"]:
if key not in content["command"]["variables"][var_param]:
content["command"]["variables"][var_param][key] = False
return Command(**content)
because in soarca (models/cacao/caco.go, lines 50 and 51) the fields are defined as omniempty and just disappears after marshalling.
didn't succeed to set timeout for the action step in the playbook
unregister the fin and it's capabilities need to be done - fin.stopFin()
the SOARCA python library is used locally from the repo because it is not yet updated on pypi.
changes made on the soarca library:
file: executor.py, line 142, added "as e:" -> "except RuntimeError as e:"
file: parser.py added code to provide default values of "constant" and "variables" fileds
case "command":
for var_param, _ in content["command"]["variables"].items():
for key in ["constant", "external"]:
if key not in content["command"]["variables"][var_param]:
content["command"]["variables"][var_param][key] = False
return Command(**content)
because in soarca (models/cacao/caco.go, lines 50 and 51) the fields are defined as omniempty and just disappears after marshalling.
didn't succeed to set timeout for the action step in the playbook
unregister the fin and it's capabilities need to be done - fin.stopFin()