Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Resolved! Execute playbook using an instance

Hi,

we have an integration with different instances, and we want to execute a builtin playbook, inside another playbook, but we need to indicate which instance we want to use.

The playbook does not have an "Advanced->Using" Field. Is there any way to

...

MTubia by L1 Bithead
  • 441 Views
  • 1 replies
  • 0 Likes

Resolved! Integration Office 365: Get mail reported by user

Hi,

 

one question about O365 integration. Maybe it's a O365 question, not a XSOAR one, but I'd like to know if I can do it with XSOAR.

I have an alert "Email reported by user as malware or phish" from Microsoft Graph Identity and Access integration.

...

MTubia by L1 Bithead
  • 856 Views
  • 4 replies
  • 0 Likes

Timeout in task not working

Hello,

Timeout configuration does not function in "ScheduleCommand" task using an automation. The timeout is set inside the task in Advanced Tab->"Execution timeout(seconds)" and inside the automation in Settings->Advanced->Timeout(seconds), but is n

...

Josep by L4 Transporter
  • 321 Views
  • 1 replies
  • 0 Likes

Help ML models

Hello,

I need some help to understand how ML models work in XSOAR. In the documentation, I can only see models related to emails.

I'd like to create a model just with the close reason, False Positive or True Positive. I already trained the model, how

...

Josep by L4 Transporter
  • 371 Views
  • 1 replies
  • 0 Likes

Demisto.db Read only Error

Dears,

 

I am facing an issue in one of the tenants as below once I am trying to press anything and as I check the directory I found that demisto is the owner and the permissions are drwxr. Appreciate any Support.

 

"Write /var/lib/demisto/tenents/(t

...

mkhalil5 by L0 Member
  • 357 Views
  • 1 replies
  • 0 Likes
Top Liked Authors