Indicator Fields - Administrator Guide - 6.11 - Cortex XSOAR - Cortex - Security Operations

Indicator fields are used to add specific indicator information to indicators. When you create a custom indicator field, you can add it to the indicator layout to which you associate the field. You can then Map Custom Indicator Fields to the relevant indicator type. You can also add an Indicator Field Trigger Script that checks for field changes and enables you to automatically take action.