Execute Steps

Execute steps represent steps that allow playbooks to perform automated operations.

Connector

Use the Connector step to add connectors,or third-party integrations, to your playbook. Connectors, such as Fortinet EDR and Fortinet FortiSIEM, enable retrieval of data from custom sources and perform automated operations.

To add a Connector step:

1. In the Playbook Designer, from the Select Step pane, choose Connector.

2. On the Connector pane, enter the name of the connector in the Search Connectors field, then select the connector.

3. In the selected connector pane, provide the following details to configure the connector:

   1. In the Step Name field, type the name of the step.

   2. (Optional) Click Add Description to add a description for the step.

   3. From the Target field, select whether you want to run the action on the Self Agent node that is configured by default on FortiSIEM or another configured custom agent.

   4. From the Configuration field, select the configuration name to be used for running the action.

      You can add multiple configurations while configuring the connector.

   5. From the Action field, select the action you want to perform using the connector.

4. (Optional) Add playbook actions, such as Variables, Loops, etc., to this step by clicking Variables in the playbook step footer. For more information on playbook actions that extend playbook steps, see Playbook Steps.

5. Once you have completed configuring the connector, click Save to save the step.

Utilities

Use the Utilities step to run various utility functions and scripts that come built-in. You can add the Utilities step to your playbook in the same way as the Connector step.

Utilities include functions such as:

• Utils: Make REST API Call: Makes a RESTful API call to a valid URL endpoint.

• Utils: Convert JSON into an HTML table: Converts input JSON into an HTML-formatted string . You can also select the layout of the converted HTML table to be either Vertical or Horizontal (default).

• FSR: Extract Artifacts from String: Extracts artifacts (indicators) from the provided string.