Indicator Layouts - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-09-18
Last date published
2024-09-26
Category
Administrator Guide
Solution
Cloud
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation
Abstract

Overview of the indicator view layout in Cortex XSOAR, indicator Summary and quick view.

Note

The indicator Full View is not available for new customers who have not purchased a TIM license.

Each indicator type has a unique set of data relevant to that specific indicator type. It is important to display the most relevant data for users.

For each indicator type, there are two views:

  • Indicator Summary

  • Quick view

The Quick View shows basic information about the indicator in Cortex XSOAR and Unit 42 (if available). Full view shows the full Cortex XSOAR indicator summary.

You can customize how the information is displayed for existing indicators by modifying the sections and fields for each view.

You can access the indicator quick view when you click an indicator on an incident page.