Threat Intel Customization - Threat Intel Management Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Threat Intel Management Guide

Product
Cortex XSOAR
Version
8
Creation date
2023-11-02
Last date published
2024-02-22
Category
Threat Intel Management Guide
Abstract

Customize your threat intel management options in Cortex XSOAR.

This section provides detailed instructions for creating custom indicators, fields, and layouts, creating feed-based jobs, managing the indicator timeline, creating TIM playbooks, and customizing threat intel reports.

For day to day management of indicators such as running threat intel reports, using Unit 42, adding an indicator to the exclusion list, etc., see Day to Day Tasks for Threat Intel Management.