TIM - Process Indicators Against Organizations External IP List
This playbook processes indicators to check if they exist in a Cortex XSOAR list containing the organizational External IP addresses or CIDR, and tags the indicators accordingly.
- Pack
- TIM_Processing
- Tasks
- 9
Inputs
- OrganizationsExternalIPList — A Cortex XSOAR list containing the organization's External IP address values. The value should be taken from the Lists inputs. The list should be with comma separated values.
- OrganizationsExternalCIDRList — A Cortex XSOAR list containing the organization's External CIDR values. The value should be taken from the Lists inputs. The list should be with comma separated values.
Commands used
- appendIndicatorField