Explore OpenCTI or OpenAEV platform with 30 days Free Trial!
XTM Hub by Filigran
Sign Up

Sector-Based Report Triage - Energy

Market Vertical & Mission-Specific Intelligence

Overview

Automatically triage incoming reports based on sector relevance for the Energy sector and update their workflow status accordingly. Can be adapted to any other sector.

Overview

This playbook automatically triages incoming reports based on the Energy sector of activity. When a new report is created on the platform, the playbook checks whether it contains a reference to the Energy sector. If a match is found, the report's workflow status is automatically promoted from "New" to "To Review", ensuring analysts focus first on the most relevant intelligence.

This playbook is pre-configured for the Energy sector but can easily be adapted to any other sector (e.g. Finance, Healthcare, Defense) by updating the contains filter in the trigger step and the match condition accordingly.

Dependencies

  • A custom report workflow must be configured in advance under Settings > Workflow, with at least two statuses: New (default) and To Review.
  • Incoming reports must have their sector field populated (via connectors or manual tagging) for the match condition to work correctly.
  • The target sector (e.g. Energy) must exist as an Identity > Sector entity in the platform.

How to use it

  1. Ensure the report workflow is configured with the required statuses.
  2. To use for a different sector, update the contains = energy filter in the trigger step and the match condition with your target sector.
  3. Activate the playbook and monitor incoming reports — matching reports will automatically appear in the "To Review" status.

Basic information

Filigran
Antoine Martins
July 08, 2026
10+
1

    We use cookies to run XTM Hub. Necessary cookies are always on, optional cookies (functionality, analytics, marketing) are used with your consent. Accept all, reject all, or manage your choices anytime in "Cookie settings".