From 3cca8ebf77488b3bc5ee9c2c749666e211d9374b Mon Sep 17 00:00:00 2001
From: Yehuda Rosenberg <90599084+RosenbergYehuda@users.noreply.github.com>
Date: Thu, 31 Oct 2024 17:25:09 +0200
Subject: [PATCH] fix (#37007)

---
 ...ok_-_Cortex_XDR_Malware_-_Incident_Enrichment.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/Packs/CortexXDR/TestPlaybooks/Test_Playbook_-_Cortex_XDR_Malware_-_Incident_Enrichment.yml b/Packs/CortexXDR/TestPlaybooks/Test_Playbook_-_Cortex_XDR_Malware_-_Incident_Enrichment.yml
index 2c5b8a41bd4a..fa7342ca868d 100644
--- a/Packs/CortexXDR/TestPlaybooks/Test_Playbook_-_Cortex_XDR_Malware_-_Incident_Enrichment.yml
+++ b/Packs/CortexXDR/TestPlaybooks/Test_Playbook_-_Cortex_XDR_Malware_-_Incident_Enrichment.yml
@@ -650,18 +650,18 @@ tasks:
     conditions:
     - label: ' Verified'
       condition:
-      - - operator: containsString
+      - - operator: in
           left:
             value:
               complex:
-                root: ExtractedIndicators
-                accessor: File
+                root: incident
+                accessor: filesha256
             iscontext: true
           right:
             value:
               complex:
-                root: incident
-                accessor: filesha256
+                root: ExtractedIndicators
+                accessor: File
             iscontext: true
           ignorecase: true
     continueonerrortype: ""
@@ -1507,7 +1507,7 @@ tasks:
       alertsandrelatedinfo:
         simple: '[{"columnheader3":""},{},{}]'
       externalsystemid:
-        simple: "84"
+        simple: "812"
     separatecontext: false
     continueonerrortype: ""
     view: |-