Skip to main content

Cortex ASM - Cortex Endpoint Enrichment

This Playbook is part of the Cortex Attack Surface Management Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.8.0 and later.

This playbook is used to pull information from Cortex Endpoint (XSIAM/XDR) systems for enrichment purposes.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • Cortex Core - IR
  • Cortex XDR - IR


  • GridFieldSetup
  • Set


  • core-get-endpoints
  • xdr-get-endpoints
  • extractIndicators

Playbook Inputs#

NameDescriptionDefault ValueRequired
RemoteIPIP address of the service.Optional

Playbook Outputs#

There are no outputs for this playbook.

Playbook Image#

Cortex ASM - Cortex Endpoint Enrichment