Skip to main content

Case Management - Generic v2

This Playbook is part of the CaseManagement-Generic Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.2.0 and later.

This playbook will extract and enrich indicators upon trigger, calculate Severity, and set SLAs and Timers.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

  • Case Management - Generic - Set SLAs based on Severity
  • Calculate Severity - Standard

Integrations#

This playbook does not use any integrations.

Scripts#

This playbook does not use any scripts.

Commands#

  • extractIndicators

Playbook Inputs#


NameDescriptionDefault ValueRequired
EnrichDetermines whether to extract and enrich all indicators in the Incident. This is run on all Incident fields.

Set to "True" to enable extraction and enrichment.
TrueOptional
SetSLAsSet to "True" to enable setting SLAs for the Incident, Time to Assignment, and Remediation SLA Timers.

Complete the other inputs to set the SLA, and Timer SLAs based on Severity.
FalseOptional
SetIncidentSLAsSet to "True" to set the SLA on the Incident.FalseOptional
SetTimeToAssignmentSLAsSet to "True" to set the SLAs on the Time to Assignment Timer.FalseOptional
SetRemediationTimerSLASet to "True" to set the SLAs on the Remediation SLA Timer.FalseOptional
CriticalRemediationSLANumber in minutes for the Incident and Remediation Timer SLAs, when the severity of the Incident is Critical.180Optional
HighRemediationSLANumber in minutes for the Incident and Remediation Timer SLAs, when the severity of the Incident is High.300Optional
MediumRemediationSLANumber in minutes for the Incident and Remediation Timer SLAs, when the severity of the Incident is Medium.1440Optional
LowRemediationSLANumber in minutes for the Incident and Remediation Timer SLAs, when the severity of the Incident is Low or Informational.7200Optional
CriticalTimeToAssignSLANumber in minutes for the Time to Assignment Timer SLA, when the severity of the Incident is Critical.15Optional
HighTimeToAssignSLANumber in minutes for the Time to Assignment Timer SLA, when the severity of the Incident is High.60Optional
MediumTimeToAssignSLANumber in minutes for the Time to Assignment Timer SLA, when the severity of the Incident is Medium.180Optional
LowTimeToAssignSLANumber in minutes for the Time to Assignment Timer SLA, when the severity of the Incident is Low or Informational.1440Optional

Playbook Outputs#


There are no outputs for this playbook.