Need help to run manual action via Api

[messier63]

Hi team 

 i want to run any action with the help of the API 
endpoint api/external/v1/cases/ExecuteManualAction,

and the payload for this is given below , I want to run virus total ping action 

if anyone can provide the correct value for this is much appreciated

{
"caseId": 59203,
"targetEntities": [
{
"caseId": 59203,
"identifier": "string",
"entityType": "string",
"isInternal": true,
"isSuspicious": true,
"isArtifact": true,
"isEnriched": true,
"isVulnerable": true,
"isPivot": true,
"environment": "string",
"fields": [
{
"isHighlight": true,
"groupName": "string",
"hideOptions": true,
"items": [
{
"originalName": "string",
"name": "string",
"value": "string"
}
]
}
],
"isManuallyCreated": true,
"sourceUrl": "string"
}
],
"properties": {
"additionalProp1": "string",
"additionalProp2": "string",
"additionalProp3": "string"
},
"actionProvider": "string",
"actionName": "string",
"scope": "string",
"alertGroupIdentifiers": [
"string"
],
"isPredefinedScope": true
}

 

[vaskenh]

Hi @messier63 .  In this scenario, have you tried running the same action manually in the browser and using the developer tools to capture the corresponding payload for the action?  I've linked a form post here where something similar is done in order to identify the correct payload values.

https://www.googlecloudcommunity.com/gc/SecOps-SOAR/How-to-update-Context-Value-using-API/m-p/840321