Integration of "Malware Investigation And Response" Playbook

${userLoginName} — Tue, 18 Jul 2023 14:32:31 GMT

I am writing to request support for migrating from the old playbook (Endpoint Malware Investigation - Generic) to the new playbook (Malware Investigation & Response Incident handler) and I have only the Standard Success support.

Additionally, I would like to inquire if it is possible to get support from the live community to assist with the integration process.

Re: Integration of "Malware Investigation And Response" Playbook

jfernandes1 — Tue, 18 Jul 2023 17:35:51 GMT

Hi @${userLoginName}, There is no required migration for Cortex content. Install the new content via the marketplace and then run the new playbook in debugger mode against older incidents. Refer - https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Playbook-Testing

The required integration list should be the same for both playbooks with an exception for maybe ITSM and Sandboxing solutions. I would recommend to follow this guide - https://xsoar.pan.dev/docs/reference/packs/malware-investigation-and-response

topic Integration of "Malware Investigation And Response" Playbook in Cortex XSOAR Discussions

Integration of "Malware Investigation And Response" Playbook

Re: Integration of "Malware Investigation And Response" Playbook