Special Script Tags - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2023-11-02
Last date published
2024-02-21
Category
Administrator Guide
Abstract

Special script tags that make a script available to a specific area in Cortex XSOAR.

Special script tags enable you to use the script in a specific area of Cortex XSOAR. For example, a script can be tagged for use in post-processing, indicator formatting, field display, indicator enhancement, etc.

Tag Value

Description

Condition

Conditional script in a playbook task

Note

All custom scripts are available for conditional tasks, including scripts without the condition tag. System scripts are only available for use in conditional tasks if they have the condition tag.

dynamic-indicator-section

General purpose dynamic section script for indicator layout

dynamic-section

General purpose dynamic section script for incident layout

enhancement

Indicator enhancement script

field-change-triggered

Script to run on incident field change

field-display

Field display script

filter

Script used as filter or conditional operator in a playbook task

general-dynamic-section

General purpose dynamic section script for object layouts (excluding incidents and indicator layouts)

incident-action-button

Incident layout action button script

indicator-action-button

Indicator layout action button script

indicator-format

Indicator formatting script

post-processing

Incident post-processing script

preProcessing

Pre-process rule script

reputation

Indicator reputation script

sla

SLA breach script

threatIntelReport-action-button

Threat Intel Report layout action button script

transformer

Script used as transformer in a playbook task

widget

Script that can be used to generate a dashboard/report widget