Create Attach or Message from Indicator

[adem_netsys]

Hello everyone,

I have a question for you. I want to be able to print the output of an indicator within an alert or incident as a message in a playbook. I can also add this visually, which would be better for me. Is this possible, and does anyone have any ideas on how I could do it?

Thanks in advance,

Secops Engineer

[doubleohseven]

Your question is a bit vague. You can add output of any kind to the comments module that would appear inside the alert or incident record in the workspace. See screenshot. Is that what you are looking for?