Home

Location

Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base

Home
Security Operations
Cortex XSOAR
Cortex XSOAR Threat Intel Management Guide
Unit 42 Intel

Last Updated:

Sun May 01 02:46:57 PDT 2022

Current Version:

6.6

Version 6.6
Version 6.5

Table of Contents

Search the Table of Contents

copyright

Threat Intel Management Overview

Threat Intel Concepts

Manage Indicators

Understand Indicators

Threat Intel Page

Export an Indicator to CSV Using the UTF8-BOM Format

Indicator Verdict

Indicator Expiration

Indicator Types

Create an Indicator Type

Indicator Type Profile

File Indicators

File Indicator Merging Strategy

Indicator Fields

Create a Custom Indicator Field

Configure the HTML Field

Map Custom Indicator Fields

Indicator Field Trigger Scripts

Customize Indicator View Layouts

Customize an Indicator Type Layout

Add a Script in the Indicator Layout

Exclusion List

Create a Feed-Triggered Job

Manage the Indicator Timeline

Indicator Extraction

Create Indicator Extraction Rules for an Incident Type

Configure What Indicator Extraction Executes

Run Indicator Extraction in the CLI

Create Indicator Extract Rules for a Playbook Task

Disable Indicator Extraction for Automations or Integrations

Indicator Relationships

Create Indicator Relationships

Leverage Relationships in the Canvas

Threat Intel Feeds

Feed Integrations

Set the Source Reliability of Enrichment Integrations

Threat Intel Management Playbooks

Create a TIM Playbook

Unit 42 Intel

Unit 42 Intel Overview

Understanding Indicator Queries

Add Unit 42 Intel Data

Sample Analysis

Sessions and Submissions

Export Indicators

Manually Export Indicators

Export Indicators Integrations

Export Indicators Playbooks

Threat Intel Reports

Threat Intel Reports Overview

Set Up and Customize Threat Intel Report Types

Configure Threat Intel Report Types

Configure Threat Intel Report Fields

Configure Threat Intel Report Layouts

Create a Threat Intel Report

Export or Share a Threat Intel Report

copyright
Threat Intel Management Overview
- Threat Intel Concepts
Manage Indicators
Threat Intel Feeds
- Feed Integrations
- Set the Source Reliability of Enrichment Integrations
Threat Intel Management Playbooks
- Create a TIM Playbook
Unit 42 Intel
Export Indicators
Threat Intel Reports

Document:Cortex XSOAR Threat Intel Management Guide

Unit 42 Intel

Last Updated:

Sun May 01 02:46:57 PDT 2022

Current Version:

6.6

Version 6.6
Version 6.5

Unit 42 Intel

Unit 42 Intel Overview

Understanding Indicator Queries

Add Unit 42 Intel Data

Sample Analysis

Sessions and Submissions

Recommended For You

Recommended Videos

Recommended videos not found.

© 2022 Palo Alto Networks, Inc. All rights reserved.