Abstract
In addition to the system-level indicator types, you can create custom indicator types in Cortex XSOAR.
When you create a custom indicator type, you configure fields and settings that impact how indicators of that type are enriched, how they are expired, how the verdict is calculated, etc.
Before you create a custom indicator type, you should familiarize yourself with the indicator type profile.
Go to
→ → → → .Click New.
In the Attributes tab, add the required indicator type profile parameters, such as name, Regex, etc.
In the Custom Fields tab, Map Custom Indicator Fields, as required.