topic Re: To add the Description while push IOCs to XDR in Cortex XSOAR Discussions

To add the Description while push IOCs to XDR

cV V — Sat, 05 Oct 2024 09:47:58 GMT

Hello Team,

We need to add the description comment to IOC's while pushing to XDR. Already description was added to Indicators it was visible in Indicators Page.

while pushing the IOC's to XDR the description was not adding to it when seeing in XDR console the comment column was empty. (Find the attached screenshot for reference)

Regards,

Chiranjeevi

Re: To add the Description while push IOCs to XDR

pagnihotri — Mon, 07 Oct 2024 09:05:27 GMT

Could you please share the screenshot of the task that has been configured?

Re: To add the Description while push IOCs to XDR

cV V — Mon, 07 Oct 2024 11:16:20 GMT

Hi @pagnihotri,

Please find above screenshot of XDR IOC page after pushing the IOC IP address from XSOAR.

Regards,

Chiranjeevi

Re: To add the Description while push IOCs to XDR

pagnihotri — Mon, 07 Oct 2024 17:03:58 GMT

I guess the screenshot of the task where you have configured to push the IOCs to XDR.

Re: To add the Description while push IOCs to XDR

cV V — Wed, 09 Oct 2024 14:41:13 GMT

The screenshot was final result of XDR Console pushing the IOC's from XSOAR

Re: To add the Description while push IOCs to XDR

pagnihotri — Thu, 10 Oct 2024 05:45:35 GMT

Hi
I meant that you must be running some playbook/script to push these IOCs to XDR.

I would like to see that playbook configuration or script that you have configured. I guess something might have been missed there.