Task 5. Add custom playbook features

Add custom features to Cortex XSOAR 8 SaaS playbooks.

You can customize your playbook to do the following.

Custom action	Description
Customize the SOC name	Customize the name of the SOC that appears in the survey header.
Field mapping	You can map output from a playbook task directly to an incident field. This means that the value for an output key populates the specified field per incident. This is a good alternative to using a task with a set incident command. You can map when you select a script in a Standard or Conditional task. For more information, see Create a standard task.
Add a sub-playbook	Sub-playbooks are playbooks that are nested under other playbooks.
Filter and transform data	Filters extract relevant data to help focus on relevant information and discard irrelevant or unnecessary data. Transformers take one value and transform or render it to another value or format.
Use scripts	Perform specific automated actions using commands which are also used in playbook tasks and in the War Room. Configure script error handling.
Extract indicators	Extract indicators from incident fields and enrich them using commands and scripts defined for the indicator type.
Extend context	Save additional data from the raw response of commands that return data.
Set and update incident fields	Use the setIncident script in a playbook task to set and update incident fields.
Use playbook polling	Configure a playbook to stop and wait for a process to complete on a third-party product, and continue when it is done.