cortex_run_analyzer_by_name
Run an analyzer by name on an observable (e.g., IP, domain) to automate security analysis. Specify analyzer name, data type, and value for execution.
Instructions
Run an analyzer by name instead of ID (convenience wrapper)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pap | No | Permissible Actions Protocol level (default: 2) | |
| tlp | No | Traffic Light Protocol level (default: 2/AMBER) | |
| data | Yes | The observable value | |
| dataType | Yes | The observable data type | |
| analyzerName | Yes | The analyzer name to search for |