cortex_run_responder
Execute automated response actions against TheHive entities like cases, tasks, artifacts, or alerts to automate security investigations and incident response.
Instructions
Execute a responder action against a TheHive entity (case, task, artifact, alert)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| responderId | Yes | The responder ID to execute | |
| objectType | Yes | The type of TheHive entity to act on | |
| objectId | Yes | The ID of the entity from TheHive | |
| parameters | No | Optional responder-specific parameters |