extractAction

A sample action module, that extract match from all parsers. A list of exclusion can be passed, by default long observables as text, JSON, YAML and HTML are not returned.

extractAction(parsers={}, supportedType={'domain', 'analytics', 'md5', 'sha1', 'sha256', 'ja3', 'ja4', 'url', 'ip', 'cve', 'mittre', 'ipv6', 'phone', 'email', 'text'}, exception=['text', 'html', 'json', 'yaml'], complex_param={'Extract': {'type': 'tags', 'value': ['all']}})

Bases: actionInterface

Extract all the observables of specified types, by default everything is returned.