In Cortex XSOAR,Reportsare constructed fromWidgets, which are modular visualization components that pull data from incidents, indicators, tasks, lists, and other system sources. The Admin Guide clarifies that widgets serve as the building blocks for dashboards and reports. When creating a report, users select widgets—such as pie charts, tables, statistics blocks, histograms, and custom scripts—and XSOAR aggregates the underlying data (incidents, indicators, evidence, etc.) into the report output.
Automations (option B) may generate data, but they do not perform the aggregation within a report. SQL queries (option C) are not used natively in XSOAR reporting; instead, widgets may embed queries through the platform’s data model. Playbooks (option D) execute response workflows and can generate additional context but are not used for aggregating report data.
Thus, the report-generation process relies entirely on widgets to extract, sort, count, and visualize information. XSOAR renders the report by collecting the aggregated values produced by each widget. This makes optionAthe correct and documented answer.
