esnet-security / SCRAM

Security Catch and Release Automation Manager
Other
5 stars 2 forks source link

API endpoint to get SCRAM history #28

Open netops2devops opened 8 months ago

netops2devops commented 8 months ago

It would be useful if there was a way to be able to query SCRAM (over WebUI and API endpoint) to check if it has previously blocked an {{IP_ADDR}} that is being investigated either by an analyst or by a SOAR workflow.

Things we care about in response object: