Skip to main content


This Script is part of the Common Scripts Pack.#

Checks whether the specified item is in a list. The default list is the XSOAR Indicators Whitelist.

Script Data#

Script Typepython2
Cortex XSOAR Version5.0.0

Used In#

This script is used in the following playbooks and scripts.

  • TIM - Process Domain Registrant With Whois
  • TIM - Process Indicators Against Approved Hash List
  • TIM - Process Indicators Against Business Partners Domains List
  • TIM - Process Indicators Against Business Partners IP List
  • TIM - Process Indicators Against Business Partners URL List


Argument NameDescription
valuesThe item to look for in the list.
listnameName of the list against which to check the value. The default is the Indicators Whitelist.
ignorecaseWhether to ignore the case of the item for which you are searching. Default is "No".
matchexactWhether to match the exact item in the list, or look for any string that contains it. Default is "No".
delimiterA one-character string used to delimit fields. For example, a comma "," should match the list separator configuration.


List.ListNameThe name of the list you compared with.string
List.InThe list of items in the list.Unknown
List.NotInThe list of items not in the list.Unknown