Skip to main content

TIM - Process Indicators Against Business Partners Domains List

This Playbook is part of the TIM - Indicator Auto-Processing Pack.#

Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

This playbook processes indicators to check if they exist in a Cortex XSOAR list containing the business partner domains, and tags the indicators accordingly.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


This playbook does not use any integrations.


  • SetAndHandleEmpty
  • FilterByList


  • appendIndicatorField

Playbook Inputs#

NameDescriptionDefault ValueRequired
Indicator QueryIndicators matching the indicator query will be used as playbook inputOptional
BusinessPartnersDomainsListNameA Cortex XSOAR list containing business partner domain names values. Domain Indicators that appear in the list are tagged as business partner.Optional

Playbook Outputs#

BusinessPartnerDomainDomain that are found in the business partner domains list.string
NotBusinessPartnerDomainDomain that are not found in the business partner domains list.string

Playbook Image#

Playbook Image