Relate Incidents.

Add Child Incidents.

Join Incidents.

Merge Incidents.

In repetitive process flows to iterate for each playbook input

When continuously ingesting incidents from third-party systems

In repetitive process flows with no more than 10 loops

In repetitive processes that requires sub-playbook re-execution

The commands must return a proper result to the war room for the analysts to understand

The code may not be written to XSOAR standards

The integrations are locked and cannot be edited with additional commands

The custom integration will not be maintained and updated by XSOAR content team

Standard (Manual)

Conditional

Section header

Standard (Automated)

To track SLA breaches per playbook

To run a script that executes on SLA assignment

To automatically alert the analyst on SLA breach

To count the time between one or more tasks

Lists

Jobs

Pre-processing rules

Exclusion List

Work Plan

Related Incidents

War Room

Context Data

Verdict provided by the most recently updated source.

Average verdict score from all sources.

Verdict provided by the source with the highest reliability score.

Highest severity verdict from all sources.

Create content and add it to the standard content by contributing through the Marketplace

Use the XSOAR GitHub Contribution Guide to add the contribution to the standard content

Create a support ticket with the custom content for review by the support team

Any custom content will be automatically uploaded to the content repository

Dashboards

Threat Intel

Settings

Marketplace