Share internal list XSOAR with url

Josep — Thu, 24 Aug 2023 07:44:35 GMT

Hello,

We created an internal list in XSOAR called "urls". We'd like to create an url to share a link with the data of the list. How can be this done?

Re: Share internal list XSOAR with url

jfernandes1 — Thu, 24 Aug 2023 14:33:18 GMT

Hi @Josep, single list data is not accessible outside XSOAR. You can use the EDL option.

Convert that list of URLs into IOCs and add a tag to them. Ex. PublishList

Then create a new instance of the Generic Export Indicators Service. Choose the format and the query. Ex. "tags:PublishList and type:URL".

You can access the data with URL like - https://<cortex-xsoar-address>/instance/execute/<instance_name>/ (You might need to set the execute.external server config to true).