Add to Destination List

This workflow adds an observable to the configured destination list in Cisco Umbrella. Supported observables: ip, domain

GitHub

---

Change Log

See the Important Notes page for more information about updating workflows

---

Requirements

• The following system atomics are used by this workflow:
  • Umbrella - Management - Add Record to Destination List
  • Umbrella - Management - Get Destination Lists
• The following atomic actions must be imported before you can import this workflow:
  • None
• The targets and account keys listed at the bottom of the page
• Cisco Umbrella

---

Workflow Steps

1. Make sure the observable type provided is supported
2. Get all of the organization’s destination lists
3. Extract the ID of the configured destination list
4. Check if extracting the destination list ID was successful:
   • If it was, add the record to the list
   • If it wasn’t, output an error

---

Configuration

• Set the Destination List Name local variable to the name of the destination list you want observables added to
• Set the Umbrella Organization ID local variable to your Umbrella organization’s ID (found in your Umbrella dashboard’s URL)
• If you want to change the name of this workflow in the pivot menu, change its display name

---

Targets

Target Group: Default TargetGroup

---

Account Keys

---