How to include sections from a layout in email body which is send by send-mail command? For example, Indicators section? Cortex XSOAR
Would you please assists on picking a user for cortex xsoar, we have been bought a 1 year license for cortex xsoar starter (1 in quantity with support 2 users) and full user (4 in quantity) which is total of 6 users. However, currently we are planning to extend the license for next 1 year and decide to proceed with only the full user (quantity o...
I need to create a simple JOB in Demisto that does the following: Sends an email to the user - with the text "Reminder to perform action XXX"Give the user half an hour to reply by email (the user can reply with any text they want),Wait half an hourIf they replied something, close the eventIf they didn't reply within half an hour,Send another ema...
Hi all, I am looking to build an inventory list of everything we have within XSOAR, such as:All playbooks, dashboards, integrations regardless of whether or not we use them. Extra points if we also know the author of each item, and / or the last person that modified the item. I know that we can check the web console but it would be great if w...
I am trying to develop a playbook that sends reminder after 24 hours if no response by user received. I was able to create a timer task that sleeps for 24 hours and runs without a worker. But i don't know how i can send a reply on the same email that was initially sent by EmailAskUser automation or send it as attachment on the reminder email x...
Hello LiveComm, I have a use-case that requires the extraction of vulnerabilities found on a specific host on Tenable SC (not tenable.io !). I have tried a combination of commands but I have not been able to to do this. When accessing the tenant GUI there is Host Assets in which you can see the vulnerabilities found on a specific host. Based on ...
Hi, I registered my account and received an email with following content: Join the Slack workspace Cortex XSOAR DFIR Community now to start collaborating! by clicking here or the button below. However, the link seems expired and I got following msg: This link is no longer active To join this workspace, you’ll need to ask the person who o...
Hi Community! I have a question since i can't find answer anywhere. I wonder how the demisto-sdk community update the content pack when there is a code change, in my experience. i need to upload the same pack sometimes because I changed one script but the command doesn't allow me and there is not force option. the error message is like :Could ...
I’m currently working with Cortex XSOAR and need some guidance on optimizing the execution of a large number of tasks. Specifically, I have a scenario where I need to close out 50+ child tickets that are linked to a parent ticket. These tasks are currently being handled by a post-processing script, but the script is slow due to the sequential na...
Hi Team, A standard customer has some query on (cluster V8 on-prem) structure. Please find it below: 1. If we don't setup VIP in cluster configuration, we could access the Web GUI by access to any IP of the nodes ? If the node is down, is it need to manually access to another IP ?2. As per my understanding, cluster also embedded with load-bala...
Hi Team, The Prisma cloud scans the CVE-2023-52426 in the docker image demisto/pandas:1.0.0.86039 and the package version is 2.5.0-r2 and is fixed in 2.6.0-r0. The customer wants to know in what version of the docker images, the CVE is resolved. So we need to know what tag version the CVE-2023-52426 is resolved?
Hello everyone, I am a machine learning scientist exploring ways to integrate ML algorithms with XSOAR. While I am familiar with XSOAR's AutoML features, my focus is on implementing custom models (e.g., TensorFlow or PyTorch models) within XSOAR workflows. I haven't found a straightforward method to directly integrate these models into a playb...
I am using the ServiceNow V2 integration. XSOAR fetches the attachments related to an incident from ServiceNow when creating an XSOAR incident. But, when I add another attachment to that ServiceNow incident, the attachment panel does not reflect the newly added attachment. The mirroring is happening and I got the File entry in the War Room. Is t...
We encountered a persistent issue in Cortex XSOAR when trying to retrieve the entry ID for files attached to incidents imported from a ServiceNow instance. Our objective was to access and process an Excel file attached to a ServiceNow ticket within XSOAR. Despite various attempts and methods, we were unable to successfully access the file due to...
reaper
on:
I want to open the use case again
