Skip to main content

Send Indicators - Cofense Triage v3

This Playbook is part of the Cofense Triage Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

Send Indicators playbook is used to create or update threat indicators in Cofense Triage that have been identified as malicious or suspicious by the analysis.

Users are only able to run the playbook in v6.0.0 or higher as it requires commands to execute the task.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

This playbook does not use any integrations.

Scripts#

This playbook does not use any scripts.

Commands#

  • cofense-threat-indicator-create
  • cofense-threat-indicator-list
  • cofense-threat-indicator-update

Playbook Inputs#


NameDescriptionDefault ValueRequired
ValueThe indicator value.Required
LevelRepresents the status of the indicator.Required
TypeType of the indicator.Required
SourceThe source reporting the indicator.Required

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#

Send Indicators - Cofense Triage v3