Skip to main content

What would be the path for app state directory in soar? When Im creating a file or diler in /tmp/siem use case using an action, where can I find the full file path to access this file/folder? 

@sarahhhh20  Here are a couple of other community posts with solutions that might be helpful:


https://www.googlecloudcommunity.com/gc/SecOps-SOAR/What-is-file-path-on-Chronicle-SOAR-for-files-are-downloaded/m-p/764628 


https://www.googlecloudcommunity.com/gc/SecOps-SOAR/Writing-Data-to-the-File-System/m-p/729747


 


Can you give more info on the example please.

If using the file system, I believe it's absolute.  I.e. if you said "/opt/file" then it's exactly there. Am I understanding the Q right ?


Reply