In Cortex XSOAR, data is extracted and
collected from various sources, such as playbook tasks, command
results, and fetched incidents, which is presented in JSON format.
The data can be manipulated by using filters and transformers. You
can add filters and transformers in a Playbook task or when mapping an
Filters enable you to extract relevant data, which you can use
elsewhere in Cortex XSOAR. For example, if an incident has several
files with varying file types and extensions, you can filter the
files by file extension or file type, and use the filtered files
in a detonation playbook. To create a filter, see create a filter.