The default expiration method for non-feed indicators is either to never expire or to expire after a specific period of time. How frequently does XSOAR check tor newly expired indicators?
D
Indicator Expiration
Indicators can have the Expiration Status field set to Active or Expired, which is determined by the Expiration field. When indicators expire, they still exist in Cortex XSOAR, meaning they are still displayed and you can still search for them. A job that runs every hour checks for newly expired indicators and updates the Expiration Status field.
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.5/Cortex-XSOAR-Administrator-Guide/Disable-Indicator-Extraction-for-Automations-or-Integrations
A job that runs weekly checks for newly expired indicators and updates the Expiration Status field. So it's weekly? This is for version 6.10
Version 6.6 - A job that runs every hour checks for newly expired indicators and updates the Expiration Status field.
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
news088
3 months agoIceman1
5 months agofranko_72
6 months, 1 week ago