Use markdown to add basic formatting to text in multiple contexts within Cortex XSOAR.
You can use Markdown in many places within Cortex XSOAR. Some of the more common places are:
Threat intel reports
Command line interface (CLI)
Scripts
Playbook tasks
Widgets
Incident fields
Lists
In most contexts where Markdown is supported, a Markdown editor is available to help you apply styles and view a preview of how those styles will look.
Markdown Syntax
Most Markdown syntax elements within Cortex XSOAR are identical to those used in basic and extended Markdown syntax. For more information about markdown syntax, see https://www.markdownguide.org/.
The following Markdown elements used in Cortex XSOAR and exposed in the Markdown editor follow the same syntax as basic/extended Markdown:
Bold
Italics
Strike-through
Headings
Lists (unordered/ordered)
Links
Code
Note
Using the Insert code button in the Markdown editor adds three backtick quotes, which allows inclusion of a literal backtick character within the code snippet.
Tables
Note
You can use the Insert table button in the Markdown editor to easily create a table with up to five rows/columns.
Images
Blockquote
Additional elements not exposed in the Markdown editor can also be applied, such as: letter-spacing
, text-shadow
, font-weight
, font-size
.
Cortex XSOAR markdown elements
Cortex XSOAR supports additional elements not found in basic/extended Markdown that provide useful functionality when working with Cortex XSOAR. For example:
Markdown Element | Syntax/Description |
---|---|
Underline |
|
Text alignment |
|
Highlight text |
|
Text color |
NoteYou can use the name of the color, or the color code (hex triplet format) |
Text background color |
NoteYou can use either the name of the color, or the color code (hex triplet format). You can use text color and text background color in parallel. For example (using the editor buttons): |
Keyboard input style |
NoteDenotes textual user input from a keyboard. |
Linking to other Cortex XSOAR incidents | #Incident ID Number |
Upload a local image | You can upload a local image that is not available on the internet to the Markdown editor. Copy/paste or drag a local image into the Markdown editor, which automatically applies the standard image syntax and adds a relative path to the image. NoteWithin the War Room, when the Markdown editor is open, you will only be able to drag images into the Markdown editor. To drag images into the War Room, first close the Markdown editor. |
Button |
Note
|
Some extended Markdown syntax may not be supported. For example, checkboxes and footnotes.