Use cases: JSON lists

Use Cortex XSIAM JSON lists to extract, filter, and transform data.

List data supports several structures, including JSON. A valid JSON list is automatically parsed as a JSON object in a playbook. Convert a list to an array when scripts or loops require it.

JSON list workflows can:

• Extract an object or subset.
• Filter extracted data.
• Apply transformers.