Cortex XDR IOCs - Push new IOCs to XDR
This is a *sub-playbook* of "Cortex XDR IOCs - Push new IOCs to XDR - Main" and should not be run on its own. This sub-playbook retrieves IOCs according to the users query input (passed from the main playbook) and pushes them into Cortex XDR, and marks them as "xdr_pushed" or "xdr_not_processed" for further processing.
- Pack
- CortexXDR
- Tasks
- 24
Inputs
- batch_size
- query
Commands used
- appendIndicatorField
- xdr-iocs-push