An administrator wants to run an automation in the War Room to set the incident field "Description" to "Confirmed Phishing". Which command should they enter in the War Room CLI?
An administrator wants to run an automation in the War Room to set the incident field "Description" to "Confirmed Phishing". Which command should they enter in the War Room CLI?
To set the incident field 'Description' in the War Room CLI, the correct command should be '!setIncident description='Confirmed Phishing''. This command follows the syntax for running automation commands in the War Room CLI, where the command starts with '!' followed by the command name and parameters.
Should be C (checked in XSOAR)
Yep C, you go into the incident from the Incidents View/Tab, down the bottom, type !setIncident description="test" and hit enter. This works.
C is correct