When ASM data is uploaded to Dropbox, use OCR and AI to analyze it and add a risk assessment to Google Sheets

■Overview

Do you spend too much time manually reviewing information and assessing risks when managing Attack Surface Management (ASM) data? Reviewing and evaluating reports in various formats one by one is not only time-consuming but also prone to becoming dependent on individual expertise. This workflow uses OCR to read ASM-related data uploaded to Dropbox and AI to automatically assess risks. The evaluation results are consolidated in Google Sheets, streamlining the manual assessment process.

■Recommended for

• Security professionals who want to automate AI-powered information organization for Attack Surface Management (ASM) operations
• Anyone struggling with manually transcribing and evaluating ASM-related reports generated in various formats
• IT teams aiming to centrally manage ASM data using Dropbox and Google Sheets

■Benefits of using this template

• Automate everything from OCR processing and AI-powered risk assessment to data entry, triggered by uploads to Dropbox, and reduce the time spent on manual work.
• Standardize evaluation criteria with AI to prevent inconsistencies between team members, standardize ASM-related operations, and reduce reliance on individual expertise.

■Flow bot steps

1. First, connect Dropbox and Google Sheets with Yoom.
2. Next, select Dropbox as the trigger and set the action to “When a file is created or updated in a specific folder.”
3. Then, set the Dropbox “Download a file” action as an operation to download the file detected by the trigger.
4. Next, select the OCR feature as an operation and use the “Read any image or PDF” action to extract text from the downloaded file.
5. Next, set the AI “Generate text” action as an operation to perform risk assessments and other tasks based on the extracted text.
6. Finally, set the Google Sheets “Add a record” action as an operation to add the AI-generated evaluation results to the designated spreadsheet.

* “Trigger”: An action that initiates the flow. “Operation”: An action that processes data within the flow after the trigger is activated.

■Customizable points in this workflow

• In the Dropbox trigger settings, specify the path of the folder you want to monitor and the file names to process.
• In the OCR action settings, specify the items you want to extract from the report, such as vulnerability names and host names.
• In the AI action settings, customize the prompt to match your workflow, including the perspectives from which risks should be assessed and analyzed.
• In the Google Sheets action settings, enter the ID and tab name of the spreadsheet where you want to output the results.

■Notes

• Connect both Google Sheets and Dropbox with Yoom.
• You can select a trigger interval of 5, 10, 15, 30, or 60 minutes.
• Please note that the shortest available trigger interval varies by plan.
• The AI operations for OCR and audio transcription are available only on the Team and Success Plans. On the Free and Mini Plans, the configured flow bot operations will result in an error.
• Paid plans, such as the Team and Success Plans, include a two-week free trial. During the free trial, you can use apps and AI features (operations) that are subject to plan restrictions.