Hi team,
We are working on an orchestration workflow where we need to use certain data( an ID) from webhook alert and use that to send to an API endpoint recursively until there is a match for that from target.
Flow:
Webhook Alerting -> Fetch ID -> Send ID through API endpoint -> Compare results from endpoint based on certain conditions with a reference list, if there's a match alert us.
OR
Get(ID) results from Yara-L rule -> Send ID through API endpoint -> Compare results from endpoint based on certain conditions with a reference list, if there's a match alert us.
What would be the best way to achieve this within chronicle? Any articles, examples, direction is much appreciated.