Default

This playbook executes when no other playbook is associated with an incident. It enriches indicators in an incident using one or more integrations.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • Entity Enrichment - Generic v2
  • Calculate Severity - Generic v2

Integrations

This playbook does not use any integrations.

Scripts

  • AssignAnalystToIncident

Commands

  • closeInvestigation
  • extractIndicators

Playbook Inputs


NameDescriptionDefault ValueRequired
EnrichDetermines whether to enrich all indicators in the incident.TrueOptional
OnCallSet to true to assign only user that is currently on shift. Requires Cortex XSOAR v5.5 or later.FalseOptional

Playbook Outputs


There are no outputs for this playbook.

Playbook Image


default