Cortex Toolbox Kitlist Builder Ingest Calculator

Content ▾

Packs Integrations Playbooks Scripts

Incident Types Incident Fields Classifiers Layouts

Parsing Rules Correlation Rules Modeling Rules

Reputation Commands Threat Feeds

Docs ▾

Documentation Analytics Alerts XDM Explorer

Settings ▾

Show test playbooks Show deprecated content

Sign in

Playbooks / ACTI Block Indicators from an Incident

ACTI Block Indicators from an Incident Deprecated

Deprecated. No available replacement.

Accenture CTI v2 · 6 tasks · 0 inputs · 0 outputs

Commands used

extractIndicators

Flowchart

Cortex Toolbox v0.1.0 — a community tool, not an official Palo Alto Networks product. Estimates are indicative; validate sizing with your Palo Alto Networks representative.