Edit a List from a Content Pack - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2023-11-02
Last date published
2024-02-14
Category
Administrator Guide
Abstract

Edit a list from a content pack by duplicating or by detaching it in Cortex XSOAR.

You can edit a list from a content pack (with a xsiam-lock.png) either by duplicating or by detaching it.

Detaching a list enables you to edit and save without having to duplicate the list. However, a detached list does not receive updated content in future Cortex XSOAR content releases. If you reattach the list, it will be updated in the following content release and all edits will be deleted. If you need to retain the updated list, duplicate and save it before reattaching.

To detach and edit a list from a content pack:

  1. Select SettingsConfigurationsObject SetupLists.

  2. Type the name of the system list you want to edit, for example CIDR - Allowedlist.

  3. Select xsiam-three-dots.png and then Detach List. In the confirmation window, click Detach.

  4. Edit content as required.

  5. Save the list.

  6. To reattach, Select xsiam-three-dots.png and then Reattach List. In the confirmation window, click Reattach.