topic Re: Powershell Modules in Xsoar Cloud in Cortex XSOAR Discussions

Powershell Modules in Xsoar Cloud

RonShuck22 — Tue, 29 Apr 2025 13:01:57 GMT

Hi,

I am trying to integrate with our Microsoft Defender instance from Xsoar Cloud. Right now I am trying to create a playbook task to add an item to the Tenant Allow Block List (TABL). Looks like the only way is via Powershell. I have a script that will work, but the default engine doesn't have the module needed, ExchangeOnlineManagement. Is this even possible to add a module? If so, any help or guidance would be great. Copilot wqas not help it gave steps for menu options that don't exist.

Re: Powershell Modules in Xsoar Cloud

JStephan — Fri, 09 May 2025 07:16:46 GMT

Hey there,

is this v6 or v8 of XSOAR?

If it is v6 it is rather easy, as you can build your own image via the gui

If it is v8 we dont have the option, so you would need to check here

https://github.com/demisto/dockerfiles-info

if by any chance we have the image you are looking for, or go through the trouble and build one your self

https://github.com/demisto/dockerfiles/blob/master/README.md

Re: Powershell Modules in Xsoar Cloud

RonShuck22 — Fri, 09 May 2025 11:22:09 GMT

Thanks for the reply. I believe demisto/pwsh-exchangev3 is working. I got past the error about unrecognized command. We are setting up a Microsoft Application ID to test and see if it works, but I expect it will.