Skip to main content

DomainTools Associate Indicator to Incident

This Playbook is part of the DomainTools Iris Investigate Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.6.0 and later.

DomainTools Associate Indicator to Incident#

This playbook calls the AssociateIndicatorsToIncident Script to Associate an Indicator to its the current incident created. Checks for additionalindicators in the customFields of an incident.


This playbook uses the following sub-playbooks, integrations, lists and scripts.


This playbook does not use any sub-playbooks.


  • DomainTools Iris


Please install this scripts by DomainTools first before running the playbook.

  • AssociateIndicatorsToIncident


This playbook does not use any domaintools integration command.

Playbook Inputs#

This playbook does not have any inputs.

Playbook Outputs#

This playbook does not have any outputs