Create Section Headers - Administrator Guide - 6.10 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.10
Creation date
2022-10-13
Last date published
2024-10-07
End_of_Life
EoL
Category
Administrator Guide
Abstract

Section headers tasks are used to manage the flow of your playbook and help you organize your tasks efficiently.

Section headers tasks are used to manage the flow of your playbook and help you organize your tasks efficiently. You create a Section Header task to group a number of related tasks under the Section Header.

Section headers can also be used for time tracking between phases in a playbook. When you start time tracking, you should apply the Start action for the section header. Since you are using this to time track a particular phase of an investigation, you should add a stop timer section header when the phase completes. The time tracking data can be used to display in dashboards and report time trends.

  1. In the playbook, click Edit to edit the playbook.

  2. Click + (Create task).

  3. Select the Section Header option.

  4. Enter a meaningful name for the section header.

  5. For a time tracking header:

    1. Click the Timers tab.

    2. Select the action to take when the timer is triggered. (Start, Stop, or Pause).

    3. Select the field on which the timer is applied.

      playbook-section-header.png
  6. Click Save.