Home
EN
Location
Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base
MENU
Home
Security Operations
Cortex XSOAR
Cortex XSOAR Threat Intel Management Guide
Unit 42 Intel
Document:
Cortex XSOAR Threat Intel Management Guide
Unit 42 Intel
Download PDF
Last Updated:
Wed May 25 02:30:20 PDT 2022
Current Version:
6.6
Version 6.8
Version 6.6
Version 6.5
Table of Contents
Search the Table of Contents
copyright
Threat Intel Management Overview
Threat Intel Concepts
Manage Indicators
Understand Indicators
Threat Intel Page
Export an Indicator to CSV Using the UTF8-BOM Format
Indicator Verdict
Indicator Expiration
Indicator Types
Create an Indicator Type
Indicator Type Profile
File Indicators
File Indicator Merging Strategy
Indicator Fields
Create a Custom Indicator Field
Configure the HTML Field
Map Custom Indicator Fields
Indicator Field Trigger Scripts
Customize Indicator View Layouts
Customize an Indicator Type Layout
Add a Script in the Indicator Layout
Exclusion List
Create a Feed-Triggered Job
Manage the Indicator Timeline
Indicator Extraction
Create Indicator Extraction Rules for an Incident Type
Configure What Indicator Extraction Executes
Run Indicator Extraction in the CLI
Create Indicator Extract Rules for a Playbook Task
Disable Indicator Extraction for Automations or Integrations
Indicator Relationships
Create Indicator Relationships
Leverage Relationships in the Canvas
Threat Intel Feeds
Feed Integrations
Set the Source Reliability of Enrichment Integrations
Threat Intel Management Playbooks
Create a TIM Playbook
Unit 42 Intel
Unit 42 Intel Overview
Understanding Indicator Queries
Add Unit 42 Intel Data
Sample Analysis
Sessions and Submissions
Export Indicators
Manually Export Indicators
Export Indicators Integrations
Export Indicators Playbooks
Threat Intel Reports
Threat Intel Reports Overview
Set Up and Customize Threat Intel Report Types
Configure Threat Intel Report Types
Configure Threat Intel Report Fields
Configure Threat Intel Report Layouts
Create a Threat Intel Report
Export or Share a Threat Intel Report
copyright
Threat Intel Management Overview
Threat Intel Concepts
Manage Indicators
Understand Indicators
Threat Intel Page
Export an Indicator to CSV Using the UTF8-BOM Format
Indicator Verdict
Indicator Expiration
Indicator Types
Create an Indicator Type
Indicator Type Profile
File Indicators
File Indicator Merging Strategy
Indicator Fields
Create a Custom Indicator Field
Configure the HTML Field
Map Custom Indicator Fields
Indicator Field Trigger Scripts
Customize Indicator View Layouts
Customize an Indicator Type Layout
Add a Script in the Indicator Layout
Exclusion List
Create a Feed-Triggered Job
Manage the Indicator Timeline
Indicator Extraction
Create Indicator Extraction Rules for an Incident Type
Configure What Indicator Extraction Executes
Run Indicator Extraction in the CLI
Create Indicator Extract Rules for a Playbook Task
Disable Indicator Extraction for Automations or Integrations
Indicator Relationships
Create Indicator Relationships
Leverage Relationships in the Canvas
Threat Intel Feeds
Feed Integrations
Set the Source Reliability of Enrichment Integrations
Threat Intel Management Playbooks
Create a TIM Playbook
Unit 42 Intel
Unit 42 Intel Overview
Understanding Indicator Queries
Add Unit 42 Intel Data
Sample Analysis
Sessions and Submissions
Export Indicators
Manually Export Indicators
Export Indicators Integrations
Export Indicators Playbooks
Threat Intel Reports
Threat Intel Reports Overview
Set Up and Customize Threat Intel Report Types
Configure Threat Intel Report Types
Configure Threat Intel Report Fields
Configure Threat Intel Report Layouts
Create a Threat Intel Report
Export or Share a Threat Intel Report
Previous
Next
Unit 42 Intel
Unit 42 Intel Overview
Understanding Indicator Queries
Add Unit 42 Intel Data
Sample Analysis
Sessions and Submissions
Previous
Next
Recommended For You
Recommended Videos
Recommended videos not found.
