Persistent List
A persistent list is a collection of key-value pairs that analysts can use to store data, and then look up from this data to use in a Playbook or Playbook node. Data stored in a persistent list can survive system reboots or unexpected system crashes. To use the persistent list feature, navigate to the Main Menu and click Persistent List.
An analyst can perform the following actions on a Persistent List:
Analysts can then retrieve the data defined in a Persistent List using any Playbook node. However, if you wish to automatically update the data that is defined in the Persistent List, you can use a Persistent Node in the Playbook workflow. For more information, see Use Persistent Node to update Persistent List.
An analyst can perform the following actions with a Persistent Node:
Examples
To perform a URL scan using Persistent List, you have two options. Firstly, you can create a static persistent list of URLs (For example: scan-urls) to be scanned. Secondly, you can add new URLs to the scan-urls persistent list automatically by configuring a Persistent Node in your playbook. The URLs defined in the scan-urls persistent list can be used as input for the Scan URL action.
If you need to store data that exceeds 2MB, it is recommended to use storage solutions such as Amazon S3. Persistent lists can hold up to 2MB of data, but anything beyond that should be uploaded to Amazon S3 or a suitable connector app from the Appstore. Once uploaded, you can easily retrieve the file as needed in the playbook using app action nodes.
Process Overview
The following is an overview of configuring a Persistent List.
 |
Before you Start
Ensure that you have permission to View Persistent List, Create/Update Persistent List, and Delete Persistent List to access the Persistent List feature.
Note
Access permissions can be assigned only to a User Group. Contact your Administrator to avail this permission.