DomainTools Associate Indicator to Incident

This Playbook is part of the DomainTools Iris Investigate Pack.

Supported versions

Supported Cortex XSOAR versions: 6.6.0 and later.

DomainTools Associate Indicator to Incident

This playbook calls the AssociateIndicatorsToIncident Script to Associate an Indicator to its the current incident created. Checks for additionalindicators in the customFields of an incident.

Dependencies

This playbook uses the following sub-playbooks, integrations, lists and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

• DomainTools Iris

Scripts

Please install this scripts by DomainTools first before running the playbook.

• AssociateIndicatorsToIncident

Commands

This playbook does not use any domaintools integration command.

Playbook Inputs

This playbook does not have any inputs.

Playbook Outputs

This playbook does not have any outputs