Cloud IDS-IP Blacklist-GCP Firewall_Extract
This Playbook is part of the Cloud-IDS Pack.#
Supported versions
Available on Cortex XSOAR (versions 6.0.0 and later) and Cortex XSIAM.
Cloud IDS-IP Blacklist-GCP Firewall_Extract#
Use this playbook to extract an attacker's IP address from Cloud IDS through Google Pub/Sub, then update the ip list to patch GCP firewall.
Playbook Inputs#
GCPFirewallName - The Name of the GCP Firewall where the playbook should set the IPs
Playbook Outputs#
JsonObject - A JSON object loaded with the attacker's IP address.
Playbook Image#
