Playbook Fridays: Arithmetic Functions Component

Welcome to ThreatConnect’s Playbook Fridays! We will continually publish posts featuring Playbooks (and sometimes Dashboards!) that can be built in the Platform.

ThreatConnect developed the Playbooks capability to help analysts automate time consuming and repetitive tasks so they can focus on what is most important. And in many cases, to ensure the analysis process can occur consistently and in real time, without human intervention. See below for our latest post:

This component was created to do basic mathematical functions within a Playbook, with an easy to use interface, and a simple string type output variable of the operation’s result. It takes two numbers and an operator as inputs, and returns the result as an output string, providing the Playbook builder the ability to do add/subtract, multiply/divide, modulus, and exponential functions.

Some highlights:

This screenshot shows what the component looks like when placed within a Playbook, as well as the string type output variable that gets passed through. This variable contains the result from the operation.

 

This details the three required fields the component needs to return a result: first number, operator, second number, i.e. 4+2, 6-1, 9*3, etc…

 

This dropdown shows the mathematical operations available to the Playbook designer.

 

Below is the underlying logic the component uses. The trigger passes the 3 inputs through to the HTTP client, where it is in crafted into a query to http://api.mathjs.org/v4/

 

HTTP client configuration to send the query to http://api.mathjs.org/v4/ where the operation is calculated, and the subsequent result is returned in the HTTP response.

 

 

This component can be found on GitHub. Importing the component and toggling it active will populate it within the components list area in the Playbooks Apps menu. https://github.com/ThreatConnect-Inc/threatconnect-playbooks/tree/master/components/TCPBC-Arithmetic%20Functions

About the Author
ThreatConnect

ThreatConnect is the only security platform with comprehensive intelligence, analytics, automation, orchestration, and workflow capabilities native within a single solution. With ThreatConnect, you will be able to increase accuracy and efficiency, improve collaboration of teams and technology, strengthen business-security goal alignment, and build a single source of truth for your entire security team.