Cortex Toolbox Kitlist Builder Ingest Calculator

Content ▾

Packs Integrations Playbooks Scripts

Incident Types Incident Fields Classifiers Layouts

Parsing Rules Correlation Rules Modeling Rules

Reputation Commands Threat Feeds

Docs ▾

Documentation Analytics Alerts XDM Explorer

Settings ▾

Show test playbooks Show deprecated content

Sign in

Incident Fields / Email

Email

Primary Email Address

Common Types shortText

Details

ID	`incident_email`
CLI Name	`email`
Type	shortText
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	Yes

Associated Incident Types

SysAid Change
SysAid Incident
SysAid Problem
SysAid Request
IAM - New Hire
IAM - Terminate User
IAM - Update User
User Profile
IAM - Sync User
IAM - Rehire User
IAM - AD User Activation
IAM - AD User Deactivation
Vectra Account
CrowdStrike Falcon Mobile Detection
Exabeam Notable User

Cortex Toolbox v0.1.0 — a community tool, not an official Palo Alto Networks product. Estimates are indicative; validate sizing with your Palo Alto Networks representative.