Skip to main content

Default

This playbook executes when no other playbook is associated with an incident. It enriches indicators in an incident using one or more integrations.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

  • Entity Enrichment - Generic v2
  • Calculate Severity - Generic v2

Integrations#

This playbook does not use any integrations.

Scripts#

  • AssignAnalystToIncident

Commands#

  • closeInvestigation
  • extractIndicators

Playbook Inputs#


NameDescriptionDefault ValueRequired
EnrichDetermines whether to enrich all indicators in the incident.TrueOptional
OnCallSet to true to assign only user that is currently on shift. Requires Cortex XSOAR v5.5 or later.FalseOptional

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


default