Article Raw Source for Web Service¶
If articles in web services are sent with only their body, they usually contain too little detail for deeper and more secure analysis. Security analysts benefit when an email article with all its raw data, including all headers, is sent to remote systems for deeper analysis.
For this purpose STORM has a function to send the raw email article data to a remote system with the generic interface operations and invokers.
If OTRS works as provider, this data is automatically sent when you set up the web service. This is only possible for the operation
If OTRS works as requester, the field needs to be selected if setting up the invoker settings by choosing the value
The article plain field can be used for the invokers
The article raw source data can be seen in the web service communication payload. For testing purposes, this information can be also found in the debugger.