Palo Alto Networks Certified Security Automation Engineer (PCSAE)IntegrationsMedium

A security engineer is developing a custom integration in Cortex XSOAR that interacts with a legacy system. The legacy system's API returns all its data in a custom, non-standard text format that is neither JSON nor XML. To process this data, the engineer needs to convert it into a structured dictionary for further use in playbooks. Which Python module is most appropriate for parsing this type of data?

  1. A`xml.etree.ElementTree`
  2. B`json`
  3. C`re`
  4. D`csv`
Show answer & explanation

Correct answer: C. `re`

The `re` module (regular expressions) in Python is ideal for parsing non-standard text formats. It allows defining patterns to extract specific pieces of information from unstructured or semi-structured text and convert them into a usable format like a dictionary.

Why the other options are wrong

  • A. `xml.etree.ElementTree` is specifically for parsing XML data, not arbitrary text.
  • B. The `json` module is for JavaScript Object Notation, not custom text formats.
  • D. The `csv` module is for Comma Separated Values, a specific tabular format, not general custom text.

Python `re` Module for Parsing

The `re` (regular expression) module in Python provides operations for matching patterns in text, making it highly effective for parsing and extracting data from custom, non-standard, or unstructured text formats.

  • Uses regular expressions for pattern matching.
  • Ideal for unstructured or semi-structured text.
  • Can extract specific data fields from text.

Memory trick: Regex grabs the right text, every time.

More Integrations questions