Create a List

Create predefined lists in Cortex XSOAR that can be parsed by and modified by scripts. Indicators exclusion list, internal IP ranges.
Predefined lists can be created and modified to be used in scripts and War Rooms. A list can contain items of the same type in any format that would be useful. These are later parsed by, and can be modified by, scripts. For example, you might need to create a list of emails, a list of known trusted IPs (allow list), JSON objects, etc.
  1. To create a list:
    1. Select
      Settings
      Advanced
      Lists
      Add a List
      .
    2. Type the name of the list.
    3. From the dropdown list, select the Content Type.
    4. To restrict access to the list, in the
      Permissions
      section, select the
      Read Only
      and
      Read and edit
      roles.
    5. Click
      Save
      .
  2. To create a list in a playbook:
    1. Create or edit a playbook task.
    2. In the
      Key
      field, type the name of the list.
    3. In the
      Value
      field, type the values for your list.
    4. Click
      OK
      .

Recommended For You