The default expiration method for non-feed indicators is either to never expire or to expire after a specific period of time. How frequently does XSOAR check tor newly expired indicators?
The default expiration method for non-feed indicators is either to never expire or to expire after a specific period of time. How frequently does XSOAR check tor newly expired indicators?
XSOAR checks for newly expired indicators every 1 hour. This routine task ensures that the Expiration Status field is updated promptly, maintaining accurate monitoring and handling of indicators within the system.
A job that runs weekly checks for newly expired indicators and updates the Expiration Status field. So it's weekly? This is for version 6.10 Version 6.6 - A job that runs every hour checks for newly expired indicators and updates the Expiration Status field.
should be D based on franko_72 As of today the exam version is about 6.6 version.
D Indicator Expiration Indicators can have the Expiration Status field set to Active or Expired, which is determined by the Expiration field. When indicators expire, they still exist in Cortex XSOAR, meaning they are still displayed and you can still search for them. A job that runs every hour checks for newly expired indicators and updates the Expiration Status field. https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.5/Cortex-XSOAR-Administrator-Guide/Disable-Indicator-Extraction-for-Automations-or-Integrations