Create a list - Create a list that can be accessed later, such as in a playbook script or managed in the CLI (War Room or Playground). - Administrator Guide - Cortex XDR - Cortex

Create a list - Create a list that can be accessed later, such as in a playbook script or managed in the CLI (War Room or Playground). - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product

Cortex XDR

License

XDR + Cloud

Creation date

2025-07-13

Last date published

2026-06-11

Category

Administrator Guide

Abstract

Create a list that can be accessed later, such as in a playbook script or managed in the CLI (War Room or Playground).

To create a Text, Markdown, HTML, CSS, or JSON list type:

Go to Settings → Configurations → Object Setup → Lists → Add a List.
Enter a name for the list.
From the list, select the Content Type.
Set Permissions for the list. By default, all roles can read and edit the list. You can instead choose specific roles to have read only or read and edit access.
Note
If you intend to use the list as part of an Automation Exclusion Policy, we recommend choosing specific roles for read and edit access. For more information on using lists in exclusion policies, see Manage automation exclusion policies.Manage automation exclusion policies
Add content as required. For an example of a JSON list and how to use it, see Use cases: JSON lists.
To save, do one of the following:
- Click Save.
- Click Save Version to save your changes in Version history for all Lists. This allows you to revisit and restore previous versions.

Note

If you want to edit a list from a content pack, you need to duplicate or detach a list. Detached lists do not receive updated content in subsequent Cortex XDR content releases. To retain an updated list, reattach it.