Create Section Headers - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-09-18
Last date published
2024-11-28
Category
Administrator Guide
Solution
Cloud
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation
Abstract

Section headers tasks are used to manage the flow of your playbook and help you organize your tasks efficiently.

Section headers tasks are used to manage the flow of your playbook and help you organize your tasks efficiently. You create a Section Header task to group a number of related tasks under the Section Header.

Section headers can also be used for time tracking between phases in a playbook. When you start time tracking, you should apply the Start action for the section header. Since you are using this to time track a particular phase of an investigation, you should add a stop timer section header when the phase completes. The time tracking data can be displayed in dashboards and report time trends.

  1. In the playbook, click Edit to edit the playbook.

  2. Click + (Create Task) .

  3. Select the Section Header option.

  4. Enter a meaningful name for the section header.

  5. For a time tracking header:

    1. Click the Timers tab.

    2. Select the action to take when the timer is triggered. (Start, Stop, or Pause).

    3. Select the field on which the timer is applied.

      playbook-section-header.png
  6. Click Save.