Hello all,
Im currently working on a very basic Cortex XDR (using the XDR plugin) workflow to ban sha256 hash via teams command.
However, I receive the below error message, it seems to fail on not having an incident ID specified (which states it is optional) for some reason.
Right now the field is blank, as it states it is optional, I have tried as well. And I cannot put in a placeholder integer as it attempts to look up and verify this incident exists.
Any help would be appreciated!
block_file
local variable ‘incident_id’ referenced before assignment
Traceback (most recent call last):
File “/usr/local/lib/python3.8/site-packages/palo_alto_cortex_xdr_rapid7_plugin-2.2.1-py3.8.egg/icon_palo_alto_cortex_xdr/actions/block_file/action.py”, line 20, in run
incident_id = int(incident_id_string)
ValueError: invalid literal for int() with base 10: ‘’