Custom lists

Note: For Google SecOps customers who have migrated to Google Cloud, use Data tables instead.

Note: Related Methods: Siemplify.add_entities_to_custom_list, Siemplify.any_entity_in_custom_list, Siemplify.remove_entities_from_custom_list, Siemplify.get_existing_custom_list_categories, Siemplify.is_existing_category

The custom list is a list of objects, that can be saved into DBs, as a shared resource, fetched and queried by each script execution instance.
The custom list can be edited in the Settings page. This section deals with SDK functionalities for custom lists.

Custom List item structure:
This object is defined in SiemplifyDataModel

Param Name	Param Type	Possible Values
identifier	string	Any identifier whatsoever. Usually this identifier represents a possible entity in future alerts
category	string	Category from the Siemplify settings
environment	string	Environment name from the Siemplify settings

To create a CustomList object, do the following:

    from SiemplifyAction import SiemplifyAction
    from SiemplifyDataModel import CustomList
    custom_list = CustomList(identifier="203.0.113.1", category="AllowListed HOSTs", environment="")