args: - auto: PREDEFINED defaultValue: "false" description: Whether to delete indicators marked as deprecated in Cyware Intel Exchange (CTIX). name: delete_deprecated predefined: - "true" - "false" - auto: PREDEFINED defaultValue: "false" description: Whether to delete indicators revoked by their source in Cyware Intel Exchange (CTIX). name: delete_revoked predefined: - "true" - "false" - auto: PREDEFINED defaultValue: "false" description: Whether to delete indicators marked as false positive in Cyware Intel Exchange (CTIX). name: delete_false_positive predefined: - "true" - "false" - auto: PREDEFINED defaultValue: "false" description: Whether to delete indicators allow-listed in Cyware Intel Exchange (CTIX). name: delete_whitelisted predefined: - "true" - "false" - auto: PREDEFINED defaultValue: "false" description: Whether to delete indicators that have been reviewed in Cyware Intel Exchange (CTIX). name: delete_reviewed predefined: - "true" - "false" - auto: PREDEFINED defaultValue: "false" description: Whether to also add the deleted indicators to the Exclusion List. When false, indicators are purely deleted and can be re-created if they reappear un-flagged. name: exclude predefined: - "true" - "false" - description: The reason recorded for the deletion (and exclusion, if enabled). name: reason comment: Deletes indicators ingested from Cyware Intel Exchange (CTIX v3) that are flagged as deprecated, revoked, false positive, reviewed, or whitelisted. All delete flags are disabled by default; the script does nothing until at least one flag is enabled. commonfields: id: CTIXDeleteFlaggedIndicators version: -1 dockerimage: demisto/python3:3.12.13.10404775 enabled: true engineinfo: {} name: CTIXDeleteFlaggedIndicators runas: DBotWeakRole runonce: false script: '' scripttarget: 0 subtype: python3 tags: [] type: python fromversion: 6.10.0 tests: - No tests (auto formatted)