> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators.md). # Configure Indicators - [Indicator Customization](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization.md): Customize indicators in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Types](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types.md): Configure indicator types in Cortex XSOAR 6.13 Threat Intel Management. - [File Indicators](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/file-indicators.md): Work with file indicators in Cortex XSOAR 6.13 Threat Intel Management. - [Create an Indicator Type](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/create-an-indicator-type.md): Create indicator types in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Type Profile](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/indicator-type-profile.md): Configure type profiles in Cortex XSOAR 6.13 Threat Intel Management. - [Formatting Scripts](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/formatting-scripts.md): Use formatting scripts in Cortex XSOAR 6.13 Threat Intel Management. - [Enhancement Scripts](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/enhancement-scripts.md): Use enhancement scripts in Cortex XSOAR 6.13 Threat Intel Management. - [Reputation Scripts](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/reputation-scripts.md): Use reputation scripts in Cortex XSOAR 6.13 Threat Intel Management. - [Reputation Commands](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/reputation-commands.md): Use reputation commands in Cortex XSOAR 6.13 Threat Intel Management. - [Map Custom Indicator Fields](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-types/map-custom-indicator-fields.md): Map custom fields in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Fields](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-fields.md): Configure indicator fields in Cortex XSOAR 6.13 Threat Intel Management. - [Create a Custom Indicator Field](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field.md): Create custom fields in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Field Trigger Scripts](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts.md): Configure field triggers in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Fields Structure](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-fields/indicator-fields-structure.md): Understand field structure in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Layouts](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-layouts.md): Configure indicator layouts in Cortex XSOAR 6.13 Threat Intel Management. - [Customize an Indicator Type Layout](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout.md): Customize layouts in Cortex XSOAR 6.13 Threat Intel Management. - [Add a Script in the Indicator Layout](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout.md): Add layout scripts in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Extraction](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction.md): Configure indicator extraction in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Extraction Modes](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/indicator-extraction-modes.md): Configure extraction modes in Cortex XSOAR 6.13 Threat Intel Management. - [Create Indicator Extraction Rules for an Incident Type](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type.md): Create extraction rules in Cortex XSOAR 6.13 Threat Intel Management. - [Run Indicator Extraction in the CLI](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/run-indicator-extraction-in-the-cli.md): Run CLI extraction in Cortex XSOAR 6.13 Threat Intel Management. - [Create Indicator Extract Rules for a Playbook Task](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task.md): Create task extraction rules in Cortex XSOAR 6.13 Threat Intel Management. - [Disable Indicator Extraction for Automations or Integrations](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations.md): Disable extraction in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Management](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management.md): Manage indicators in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Query](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/indicator-query.md): Query indicators in Cortex XSOAR 6.13 Threat Intel Management. - [Configure the Indicator Timeline](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/configure-the-indicator-timeline.md): Configure timelines in Cortex XSOAR 6.13 Threat Intel Management. - [Exclusion List](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/exclusion-list.md): Manage exclusions in Cortex XSOAR 6.13 Threat Intel Management. - [Export Indicators](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators.md): Export indicators from Cortex XSOAR 6.13 Threat Intel Management. - [Manually Export Indicators](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators/manually-export-indicators.md): Manually export indicators from Cortex XSOAR 6.13 Threat Intel Management. - [Export Indicators Integrations](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators/export-indicators-integrations.md): Export using integrations in Cortex XSOAR 6.13 Threat Intel Management. - [Export Indicators Playbooks](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators/export-indicators-playbooks.md): Export through playbooks in Cortex XSOAR 6.13 Threat Intel Management. - [Export an Indicator to CSV Using the UTF8-BOM Format](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/export-indicators/export-an-indicator-to-csv-using-the-utf8-bom-format.md): Export UTF8-BOM CSV files in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Relationships](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/indicator-relationships.md): Use relationships in Cortex XSOAR 6.13 Threat Intel Management. - [Create Indicator Relationships](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/indicator-relationships/create-indicator-relationships.md): Create relationships in Cortex XSOAR 6.13 Threat Intel Management. - [Leverage Relationships in the Canvas](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-management/indicator-relationships/leverage-relationships-in-the-canvas.md): Use canvas relationships in Cortex XSOAR 6.13 Threat Intel Management. - [Indicator Expiration](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/indicator-expiration.md): Configure expiration in Cortex XSOAR 6.13 Threat Intel Management. - [Threat Intel Feeds](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds.md): Configure feeds in Cortex XSOAR 6.13 Threat Intel Management. - [Feed Integrations](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds/feed-integrations.md): Configure feed integrations in Cortex XSOAR 6.13 Threat Intel Management. - [Feed-Triggered Jobs](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds/feed-integrations/feed-triggered-jobs.md): Run feed-triggered jobs in Cortex XSOAR 6.13 Threat Intel Management. - [Set the Source Reliability of Enrichment Integrations](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds/set-the-source-reliability-of-enrichment-integrations.md): Set source reliability in Cortex XSOAR 6.13 Threat Intel Management. - [Threat Intelligence Management Playbooks](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators/threat-intel-feeds/threat-intelligence-management-playbooks.md): Configure playbooks in Cortex XSOAR 6.13 Threat Intel Management. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsoar-6-threat-intel-management-guides/6.13/configure-indicators.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.