Create Section Headers - Playbook Design Guide - 6.x - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Playbook Design Guide

Product
Cortex XSOAR
Version
6.x
Creation date
2023-01-19
Last date published
2023-12-19
Category
Playbook Design Guide

Section headers tasks are used to manage the flow of your playbook and help you organize your tasks efficiently. You create a Section Header task to group a number of related tasks under the Section Header.

Section headers can also be used for time tracking between phases in a playbook. When you start time tracking, you should apply the Start action for the section header. Since you are using this to time track a particular phase of an investigation, you should add a stop timer section header when the phase completes. The time tracking data can be used to display in dashboards and report time trends.

  1. In the playbook, click Edit to edit the playbook.

  2. Click + (Create task).

  3. Select the Section Header option.

  4. Enter a meaningful name for the section header.

  5. For a time tracking header:

    1. Click the Timers tab.

    2. Select the action to take when the timer is triggered. (Start, Stop, or Pause).

    3. Select the field on which the timer is applied.

      playbook-section-header.png
  6. Click Save.