Report Categorization - Cofense Triage v3
Report Categorization playbook investigates reports that are unprocessed or uncategorized on Cofense Triage as incident alerts in XSOAR and categorizes them based on the severity of the incident.
- Pack
- CofenseTriage
- Tasks
- 23
Inputs
- OnCall — Set to true to assign only user that is currently on shift. Requires Cortex XSOAR v5.5 or later.
- ReportID — Requires report ID to investigate and categorize the report that is pulled from Cofense Triage.
- AutoCategorize — Whether the user wants to categorize the report automatically or not.
- MaliciousCategory — The category to be assigned to the report if it is malicious.
- NonMaliciousCategory — The category to be assigned to the report if it is non-malicious.
Commands used
- cofense-category-list
- cofense-report-categorize
- cofense-report-download
- extractIndicators
- rasterize-email
- rasterize-image