args: - default: false description: Incident ID. isArray: false name: incident_id required: true secret: false - default: false description: 'Array of tags in the form of [{''label'': ''tag1''},{''label'': ''tag2''},{''label'': ''tag3''}].' isArray: true name: domain_tags required: true secret: false - default: false description: Comma-seperated value of malicious tags to check. tag1,tag2,tag3. isArray: false name: malicious_tags required: true secret: false comment: Check DomainTools domain tags and if a tag is found mark incident as high severity. commonfields: id: CheckTags version: -1 enabled: false name: CheckTags script: '-' system: false tags: - DomainTools timeout: '0' type: python subtype: python3 fromversion: 6.6.0 dockerimage: demisto/python3:3.12.13.10116658 tests: - No tests (auto formatted)