TIM - Process Indicators - Fully Automated

This playbook tags indicators ingested from high reliability feeds. The playbook is triggered due to a Cortex XSOAR job. The indicators are tagged as approved_allow, approved_block, approved_watchlist. The tagged indicators will be ready for consumption for 3rd party systems such as SIEM, EDR etc.

Pack
TIM_Processing
Tasks
10

Inputs

Commands used