Skip to main content

TIM - Process Indicators Against Business Partners URL List

Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

This playbook processes indicators to check if they exist in a Cortex XSOAR list containing business partner urls, and tags the indicators accordingly. To enable the playbook, provide a Cortex XSOAR list name containing business partner urls.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

This playbook does not use any integrations.

Scripts#

  • FilterByList
  • SetAndHandleEmpty

Commands#

  • appendIndicatorField

Playbook Inputs#


NameDescriptionDefault ValueRequired
Indicator QueryIndicators matching the indicator query will be used as playbook inputOptional
BusinessPartnersUrlListNameA Cortex XSOAR list containing business partner url values. Url Indicators that appear in the list are tagged as business partners.Optional

Playbook Outputs#


PathDescriptionType
BusinessPartnerUrlURLs that are found in the business partner url list.string
NotBusinessPartnerUrlURLs that are not found in the business partner url list.string

Playbook Image#


Playbook Image