The Cortex XSOAR Threat Intel Management guide provides you with the ability to unify the core components of threat intel, including threat intel aggregation, scoring, and sharing.
What's New?
Field Trigger Scripts for Indicators
Associate indicator fields with trigger automation scripts that check for field changes, and then take action based on them.
Edit on blur
You can now save changes to threat intel report/indicator inline fields without the need to click the check mark, by adding the inline.edit.on.blur configuration (set to true).
Dynamic layouts and fields
When customizing an incident or indicator layout, you can now add a filter. If the filters apply, the specific fields or tabs show in the layout.
