Skip to main content

Hi team, 

We are working on an orchestration workflow where we need to use certain data( an ID) from webhook alert and use that to send to an API endpoint recursively until there is a match for that from target.

Flow:
Webhook Alerting -> Fetch ID -> Send ID through API endpoint -> Compare results from endpoint based on certain conditions with a reference list, if there's a match alert us.

OR

Get(ID) results from Yara-L rule -> Send ID through API endpoint -> Compare results from endpoint based on certain conditions with a reference list, if there's a match alert us.

What would be the best way to achieve this within chronicle? Any articles, examples, direction is much appreciated. 


Hi ​@chronicleDDsr 

I don’t have a detailed solution for you, but these 3 community posts may helpful.  


Latest Webhook update

Log Ingestion using Google Chronicle Connector

Is there an API endpoint to create an alert in Chronicle?

 


Thank you ​@ErikaB 


Reply