Preprocessing rule "Link and Close" category Rule configured

Hi Team,

Preprocessing rule "Link and Close" category Rule configured : Link to oldest incident Created within the last 5 Minutes Issues on the preprocessing rule : 1. 2 incidents are created at the same time, both are closed . None of them has open

XSOAR Qradar Offense Ingestion Doubt

Hello all,

We've a situation that we would like to clarify if it's a misconfiguration or if it is an expected behaviour.

#Qradar integration is only fetching ofenses that includes specific rule ids but qradar how it works associates new events and

XSOAR Community Edition on Version 6 or 8?

Hi Good Day,

I have question regarding XSOAR Community Edition, I already request for Community Edition but while waiting for that, i have some question regarding version that community Edition use, is it version 6 or version 8?

GoQR.me QR Code Reader misbehaving

I have an XSOAR 8.5 instance with a playbook which makes use of the GoQR.me QR Code Reader integration.

It had been working nicely in the playbook for months, but has begun to misbehave.

In the playbook, images are extracted from a phishing email a

Automating SLA in XSOAR with Reminders and Reset on Updates

Hi team!

First of all, thank you very much in advance for your help.

I want to add an SLA to an incident in XSOAR so that if the SLA is breached, the incident is automatically closed. In theory, this is straightforward to implement by setting a t

How to join slack {{#demisto-developers }} channel

Hi,

I registered my account and received an email with following content:

Join the Slack workspace Cortex XSOAR DFIR Community now to start collaborating! by clicking here or the button below.

However, the link seems expired and I got following

Query related to [HK][CCBA][232689][Finetune XSOAR playbook - Update the Group Member]

Hi Team,

I have standard customer, their requirement is

[HK][CCBA][232689][Finetune XSOAR playbook - Update the Group Member] Customer informed that existing playbook flow is XSOAR will get the group member list from 1 device, and update the member l

What is the generally accepted way to "join" two playbooks, where one runs at some point up to several days after the first on finishes

I have two master playbooks, the first which runs a set of playbooks, which initiates some external jobs. These jobs can take a number of days to complete, but if run as a small subset, may only take an hour or two.

So, after this first playbook se

Help playbook XSOAR - XDR assest and vulnerability module

Hi,

I am creating a playbook with the objective of integrating Cortex XSOAR and Cortex XDR. 

The idea is for Cortex XSOAR to query Cortex XDR , retrieve all the assets detected by the broker scanner, and verify which assets do or do not have the XDR

Maximum users that can be created in XSOAR and XDR ?

What is the count of maximum user accounts that can be created in XSOAR and XDR ?

Is there any limit to create the user accounts ?

Append Multiple Ips to input

Hello Live Comm,

We are working on a WebEx playbook where IPs need to be added to proxy profiles. However, we are encountering an issue where, if a user mentions multiple IPs, the playbook task fails to add those IPs. Could you please suggest changes