SQL results into layout

Hi ,

I’m running a playbook that generates multiple SQL results. What are the best practices for displaying these effectively in the incident layout? Should I use Markdown, custom sections, or widgets? Any tips for handling this?

Thanks!

XSOAR Feature Request

Hello all xsoar enthusiasts,

There is a FR that helps us to make xsoar a better place for MS Defender integration. Please upvote this FR here: Add Microsoft Sentinel | Cortex XSOAR Customer Feature Request

FR Description:
Palo Alto offers a range of

ServiceNow Developer looking for ideas

Hello all,

     I am a ServiceNow developer that is assisting a user that is using the XSOAR integration.  The user is using the XSOAR application to run queries on my SN instance, but is not getting any results.  I have checked his API account and

Child Incident Evidence In Parent

Hello!

I need to mark some child incident entries as notes and evidence in the parent incident.

I have found ways in which you can pass the entries to the parent and then mark them as note/evidence in the parent. However, I would like to have an auto

Build transformer with execute.command()

Hello,

I'm trying to build a transformer that given a IP gives back the reverse dns. However, it seems that using commands in transformers is not allowed. Am I wrong?

How to Automatically Send an Email When an Incident is Created in XSOAR?

Hello,

I want to automatically send an email whenever an incident is created in XSOAR. I’ve created a playbook and written a simple script that sends an email for a specific incident when executed within the playbook.

However, I’d like to automate th

Remove apps with Playbook XSOAR XDR

Web File Repository Integration error "Failed to execute wfr-status command"

Hi,

Anyone encountered the following error when executing "wfr-status"?

CSOAR Pre processing rule with scheduled jobs

How can we set the preprocess rule to drop any incidents created by schedule jobs?

For example: any incident category=job and some incident field like description contains "False". The playbook in schedule Job, will run some tasks and condition and

Securonix

Can someone help me? I have created an instance in the Securonix integration but I want to fetch incidents but I do not get the alerts from my SIEM SECURONIX. It should be noted that the user and everything is correct. But I would like to know if any

How to use dashboard filter query in Scripts

How to use, dashboard filter query in scripts?

Cortex XSOAR