The Security Flow Create File node provides the ability to create a file associated with the current message. The file created by this node is viewable on the Incident Timeline.
The Create File node exposes the following functionality:
- Create and attach a JSON, CSV, or TXT file to the message via the
NL Create Filenode.
NL-Add-Email-Attachmentsnode and viewed in the Incident timeline. This node writes out the data for the
File Typeto the defined
File Name. The extention is automatically added to the
File Namebased on the selected file type. The
File Nameof the output file is limited to 256 characters. A longer name is automatically truncated.
NL Create File nodes in the following example were configured to create CSV, JSON, and TXT files.
The files are displayed in the message panel on the newly created incident’s timeline.
When the File Detail option is selected the modal below is displayed with the specific file’s details and options to Copy and Search for other incidents containing the same IoC record. There are also options to Delete File which deletes the file from the message, and Download for downloading the file.