TIM - Add IP Indicators To SIEM

Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

TIM playbook - This playbook receives indicators from its parent playbook and provides the indicators as inputs for the sub-playbooks that push the indicators to your SIEM.


This playbook uses the following sub-playbooks, integrations, and scripts.


  • TIM - QRadar Add IP Indicators
  • TIM - ArcSight Add IP Indicators


  • ArcSight ESM v2
  • QRadar


This playbook does not use any scripts.


This playbook does not use any commands.

Playbook Inputs

NameDescriptionDefault ValueRequired
Indicator QueryIndicators matching the indicator query will be used as playbook inputOptional

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

Playbook Image