Hello all,
We want to create a pre-process rule to drop all Phishing incident without [Phish Alert] inside the email subject.
We're creating the following rule
type equals Phishing AND emailto equals test@test.ts AND emailsubject contains [Phish Aler...
Hello All
In my Playbook I run into an issue with empty returns.
My Playbook requests Cherwell with several hosts in an array: ["server-A","server-B"]
In Cherwell, "server-B" does not exist, so I do see that in the "Result Tab" of the Task, but the Out
...
Hello Guys,
I'm trying to retrieve a file that has been quarantined by Cortex XDR using an XSOAR playbook. I trace the Action ID in XDR but I always find it failing. However, it's always working for non-quarantined files.
I need to retrieve the file
...
Hello all
I did some PDF-Requests to Wildfire and getting Info back as xml.
One of those reports are marked as "Malicious" but I do not see, what/why it is Malicious.
So I've investigated and did a curl extract of the sha265 Wildfire Request.
And look
...
nikoolayy1
on:
Playbook access to malicious website
nikoolayy1
on:
Extracting urls from html text
