Using XTI in playbooks

Extended Threat Intelligence (XTI) utilizes existing Threat Intel Management (TIM) to automate triage, enrichment, and response for threat intel use cases.

## Playbook commands supported by XTI

The following built-in commands (also referred to as system commands) can be used with XTI.

The supported commands are:

* _createNewIndicator_
* _setIndicator_

**Related links**

For more information on specific built-in commands, see the in-product Script Helper available from Incident **Response → Automation → Scripts → Script Helper**.

For general information about playbooks, see [Playbooks](https://app.gitbook.com/s/urXrv6qkJRLbdhMdvPIU/cortex-xsiam-development-guide/playbooks).

<br>