- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk Phantom - How to get authentication Credentials from existing app for custom function?
lsethl
New Member
12-29-2022
08:22 PM
I am trying to make a custom function for Cybereason, however as I am not so familiar with Python I was wondering if there is a way to pull the credentials from the existing app so that I do not have to type in the username and password as clear text in my custom function
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
phanTom

SplunkTrust
01-03-2023
02:16 AM
@lsethl if you require to communicate with anything external to the SOAR platform, it should do so via an app.
App passwords are encrypted and if you wanted to do it the way you explain you would have to "hack" the box to get the key and decrypt etc. This is done automatically by apps so you should look to build an app.
Lots of information here to build apps:
https://docs.splunk.com/Documentation/SOARonprem/5.4.0/DevelopApps/Overview
Happy SOARing!
