Indicator Types - Administrator Guide - 6.10 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide
Product
Cortex XSOAR
Version
6.10
Creation date
2022-10-13
Last date published
2023-12-06
Category
Administrator Guide

Indicators are categorized by indicator type, which determines the indicator layout (fields) that are displayed and which scripts are run on indicators of that type.

The following is a list of some of the indicator types.

  • IP Address

  • Domain

  • URL

  • File

  • Email

  • Host

  • CIDR

  • Attack Pattern

  • Threat Actor

  • Intrusion Set

  • Malware

  • Campaign

  • Tool

  • Report

  • Course of Action

  • Infrastructure

  • Registry Key

  • CVE CVSS Score