An engineer would like to add a custom field to the New Job form for a job triggered from a threat intel feed.
How would the engineer implement this?
An engineer would like to add a custom field to the New Job form for a job triggered from a threat intel feed.
How would the engineer implement this?
To add a custom field to the New Job form for a job triggered from a threat intel feed, the engineer can edit the new job form from the Indicator Feed incident type editor. This allows for customization and addition of necessary fields tailored to specific requirements of the threat intel feeds.
B is correct: You can customize the new job form by editing the Indicator Feed incident type. https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.5/Cortex-XSOAR-Threat-Intel-Management-Guide/Feed-Integrations
b is correct
I think the answer is actually C. From the link below "The following table lists the fields available when defining a job, and their descriptions" There is no option to create a custom field. https://xsoar.pan.dev/docs/incidents/incident-jobs
B is correct