https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/discussion-send-email-to-user-with-xsoar-link-for-them-to-upload/m-p/596729#M3598 <P>Solved: Create an incident field with type attachment.&nbsp;</P> <P>&nbsp;</P> <P>Create a xsoar playbook data collection task. Under the message tab, add the recipient to send the email to. Under the questions tab, + add question based on field and include the newly created attachment incident field.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="mfaridsh_0-1725440040713.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61950i51AFE6BBEC4A313D/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="mfaridsh_0-1725440040713.png" alt="mfaridsh_0-1725440040713.png" /></span></P> Wed, 04 Sep 2024 08:56:02 GMT mfaridsh 2024-09-04T08:56:02Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/discussion-send-email-to-user-with-xsoar-link-for-them-to-upload/m-p/596718#M3597 <P>Is there a way to allow users to upload files to #xsoar&nbsp;incident via outlook email integration?</P> <P>&nbsp;</P> <P>example. Malware incident triggered from user's endpoint. soar sends an email to user stating they have detected a malware on their device. please zip the file and upload the file to xsoar using the link.</P> <P>&nbsp;</P> <P>Regards,</P> <P>Farid</P> <P>&nbsp;</P> <P>&nbsp;</P> Wed, 04 Sep 2024 06:47:25 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/discussion-send-email-to-user-with-xsoar-link-for-them-to-upload/m-p/596718#M3597 mfaridsh 2024-09-04T06:47:25Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/discussion-send-email-to-user-with-xsoar-link-for-them-to-upload/m-p/596729#M3598 <P>Solved: Create an incident field with type attachment.&nbsp;</P> <P>&nbsp;</P> <P>Create a xsoar playbook data collection task. Under the message tab, add the recipient to send the email to. Under the questions tab, + add question based on field and include the newly created attachment incident field.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="mfaridsh_0-1725440040713.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61950i51AFE6BBEC4A313D/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="mfaridsh_0-1725440040713.png" alt="mfaridsh_0-1725440040713.png" /></span></P> Wed, 04 Sep 2024 08:56:02 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/discussion-send-email-to-user-with-xsoar-link-for-them-to-upload/m-p/596729#M3598 mfaridsh 2024-09-04T08:56:02Z