This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Start a conversation

Help with retrieving list of XSOAR items

Hi all, I am looking to build an inventory list of everything we have within XSOAR, such as:All playbooks, dashboards, integrations regardless of whether or not we use them. Extra points if we also know the author of each item, and / or the last person that modified the item. I know that we can check the web console but it would be great if w...

Resolved! How to include the initial Email as attachment OR how to reply on the same Email sent

I am trying to develop a playbook that sends reminder after 24 hours if no response by user received. I was able to create a timer task that sleeps for 24 hours and runs without a worker. But i don't know how i can send a reply on the same email that was initially sent by EmailAskUser automation or send it as attachment on the reminder email x...

Getting Vulnerability Findings from Tenable SC for a Specific Host

Hello LiveComm, I have a use-case that requires the extraction of vulnerabilities found on a specific host on Tenable SC (not tenable.io !). I have tried a combination of commands but I have not been able to to do this. When accessing the tenant GUI there is Host Assets in which you can see the vulnerabilities found on a specific host. Based on ...

How to join slack {{#demisto-developers }} channel

Hi, I registered my account and received an email with following content: Join the Slack workspace Cortex XSOAR DFIR Community now to start collaborating! by clicking here or the button below. However, the link seems expired and I got following msg: This link is no longer active To join this workspace, you’ll need to ask the person who o...

TonyZhu by • L2 Linker
  • 7503 Views
  • 12 replies
  • 1 Likes

Demisto-sdk upload doesn't allow override

Hi Community! I have a question since i can't find answer anywhere. I wonder how the demisto-sdk community update the content pack when there is a code change, in my experience. i need to upload the same pack sometimes because I changed one script but the command doesn't allow me and there is not force option. the error message is like :Could ...

Does XSOAR support multithreading/multiprocessing?

I’m currently working with Cortex XSOAR and need some guidance on optimizing the execution of a large number of tasks. Specifically, I have a scenario where I need to close out 50+ child tickets that are linked to a parent ticket. These tasks are currently being handled by a post-processing script, but the script is slow due to the sequential na...

Query on V8

Hi Team, A standard customer has some query on (cluster V8 on-prem) structure. Please find it below: 1. If we don't setup VIP in cluster configuration, we could access the Web GUI by access to any IP of the nodes ? If the node is down, is it need to manually access to another IP ?2. As per my understanding, cluster also embedded with load-bala...

Using custom machine learning models in XSOAR

Hello everyone, I am a machine learning scientist exploring ways to integrate ML algorithms with XSOAR. While I am familiar with XSOAR's AutoML features, my focus is on implementing custom models (e.g., TensorFlow or PyTorch models) within XSOAR workflows. I haven't found a straightforward method to directly integrate these models into a playb...

In the ServiceNow V2 integration, mirrored attachments are not visible on the layout.

I am using the ServiceNow V2 integration. XSOAR fetches the attachments related to an incident from ServiceNow when creating an XSOAR incident. But, when I add another attachment to that ServiceNow incident, the attachment panel does not reflect the newly added attachment. The mirroring is happening and I got the File entry in the War Room. Is t...

MParmar2 by • L0 Member
  • 1953 Views
  • 2 replies
  • 0 Likes

Issue with Retrieving Entry ID for Files Attached to ServiceNow Tickets in Cortex XSOAR

We encountered a persistent issue in Cortex XSOAR when trying to retrieve the entry ID for files attached to incidents imported from a ServiceNow instance. Our objective was to access and process an Excel file attached to a ServiceNow ticket within XSOAR. Despite various attempts and methods, we were unable to successfully access the file due to...

Wassif by • L1 Bithead
  • 2624 Views
  • 3 replies
  • 0 Likes

How to Send a Test Notification Email in Cortex XSOAR and Identify Available Variables?

Hi everyone, I’m trying to test the email notifications configured in Cortex XSOAR to ensure they include the correct variables (like incident severity, name, and ID). Specifically, I want to verify the notification sent to an analyst when they are assigned an incident. Here are my main questions: Is there a built-in way to send test notifica...

Welcome to the Cortex XSOAR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 664 Views
  • 0 replies
  • 0 Likes

playground query question for servicenow

Hi All, a broad question i know... but is there a way to do a query to list/output all available tables in a specific integration within the playground? and possibly even the fields with each table? this is specific to servicenow v2 ie servicenow-query-table table_name=* thanks in adv

PA_nts by • L4 Transporter
  • 724 Views
  • 0 replies
  • 1 Likes
  • 1307 Posts
  • 46 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks