This script will parse a CSV file and place the unique IPs, Domains and Hashes into the context.

Script Data#

Script Typepython2
Tagsfile, csv, Utility

Used In#

This script is used in the following playbooks and scripts.

  • Block IOCs from CSV - External Dynamic List


Argument NameDescription
entryIDThe war room entryID of the file.
fileThe name of the file. The file must be uploaded to the War Room.
ipsThe column number that contains IP Addresses. (First column is column 0)
domainsThe column number that contains domains. (First column is column 0)
hashesThe column number that contains file hashes. (First column is column 0)
parseAllParses and converts all of the rows in the CSV into JSON and puts them into the context.
codecThe codec type used to parse the file. (some character sets are not UTF-8 supported)


IP.AddressIP address found in the parsed file.Unknown
Domain.NameDomain found in the parsed file.Unknown
File.MD5MD5 found in the parsed file.Unknown
File.SHA1SHA1 found in the parsed file.Unknown
File.SHA256SHA256 found in the parsed file.Unknown
ParseCSV.ParsedCSVParsed csv in the form of JSON array.Unknown