Supported Cortex XSOAR versions: 6.0.0 and later.
This playbok is triggered by fetching escalated ZTAP Alerts. The playbook fetches newly escalated alerts. Then, the playbook performs enrichment on the incident's indicators. Lastly, it adds comments/logs as Evidence.
This playbook uses the following sub-playbooks, integrations, and scripts.
- Entity Enrichment - Generic v3
- Calculate Severity - Generic v2
|Enrich||Determines whether to enrich all indicators in the incident.||True||Optional|
|OnCall||Set to true to assign only user that is currently on shift. Requires Cortex XSOAR v5.5 or later.||false||Optional|
There are no outputs for this playbook.