Cortex Toolbox
Kitlist Builder
Ingest Calculator
Content ▾
Packs
Integrations
Playbooks
Scripts
Incident Types
Incident Fields
Classifiers
Layouts
Parsing Rules
Correlation Rules
Modeling Rules
Reputation Commands
Threat Feeds
Docs ▾
Documentation
Analytics Alerts
XDM Explorer
Settings ▾
Show test playbooks
Show deprecated content
Sign in
Playbooks
/ Process QWatch Alert - Qintel
Process QWatch Alert - Qintel
Extracts exposure records from a QWatch alert
Qintel
· 6 tasks · 1 input · 0 outputs
Inputs
Incident
—
Flowchart
−
+
Reset
yes
Start
Start
Load Exposures - LoadJSON
Load Exposures
LoadJSON
IncreaseIncidentSeverity - IncreaseIncidentSeverity
IncreaseIncidentSeverity
IncreaseIncidentSeverity
AssignAnalystToIncident - AssignAnalystToIncident
AssignAnalystToIncident
AssignAnalystToIncident
Done
Done
Is Source Malware?
Is Source Malware?