Edit a list from a content pack by duplicating or by detaching it in Cortex XSOAR.
You can edit a list from a content pack (with a 
) either by duplicating or by detaching it.
Detaching a list enables you to edit and save without having to duplicate the list. However, a detached list does not receive updated content in future Cortex XSOAR content releases. If you reattach the list, it will be updated in the following content release and all edits will be deleted. If you need to retain the updated list, duplicate and save it before reattaching.
To detach and edit a list from a content pack:
Select → → → .
Type the name of the system list you want to edit, for example CIDR - Allowedlist.
Select
and then Detach List. In the confirmation window, click Detach.Edit content as required.
Save the list.
To reattach, Select
and then Reattach List. In the confirmation window, click Reattach.