This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Start a conversation

XSOAR to analyze PDF and Office files

Hi everyone,Does anyone use XSOAR to analyze PDF and Office files? My idea is for users to send emails to a specific account. Cortex XSOAR would then receive these emails, extract the files, and analyze them using tools like OLETools. If any suspicious activity is detected, it would notify the IT team. If no suspicious activity is found, it woul...

tlmarques by • L4 Transporter
  • 1686 Views
  • 1 replies
  • 1 Likes

Resolved! The command does not exist or it is disabled

Hello Team, I am new to use Cortex Xsoar. While running script getting the below error. why it is? IPReputation=${incident.details} returned an error Hide reason Reason The command does not exist or it is disabled enrichIndicators=${incident.details} returned an error Hide reason Reason The command does not exist o...

Resolved! Discussion: Send email to user with #xsoar link for them to upload files?

Is there a way to allow users to upload files to #xsoar incident via outlook email integration? example. Malware incident triggered from user's endpoint. soar sends an email to user stating they have detected a malware on their device. please zip the file and upload the file to xsoar using the link. Regards, Farid

mfaridsh by • L0 Member
  • 1768 Views
  • 1 replies
  • 1 Likes

Use CPU% = 50 in XSOAR DEV

hi! i expermiented a rare problem in my xsoar dev, in there i have 0 jobs, 0 integration active, 0 incidents creation, 0 everything. But every 15 minutes, the cpu% increases to 50 for about 5 minutes, then to 0. The last change i've made is to configure the syslog to a host, but for this task, i followed step by step the official XSOAR documenta...

SFernandez413037_0-1724701049204.png

Phishing ML Model Issue !DBotPredictOutOfTheBoxV2

Hi All, I'm using phishing playbook and in which there is ML part but it gives me error even package is installed on xsoar.Please check error description here Command: !DBotPredictOutOfTheBoxV2 emailSubject="We’re sorry, an email was sent by mistake" emailBody="any dummy content here..." Reason Error from Scripts is : Script fail...

Single Incident/Playbook is killing the whole platform

Hi, I built a playbook to pull some nested data (~8 MB in total) which then is used in a looped subplaybook for additional data extraction.The subplaybook is relatively simple, uses for each input loop, starts with deletecontext (all=yes) and returns couple of small parameters through Outputs. It supposed to have ~600 iterations in total. Subp...

Antanas by • L2 Linker
  • 1118 Views
  • 1 replies
  • 0 Likes

Unique Files From File Object

Dear All, I am currently optimizing the phishing playbook and have encountered some issues with the detonation and enrichment processes that handle file objects. I noticed that duplicate files are being passed to the sub-playbooks. I attempted to use a unique function to filter out these duplicates, but it didn't work as expected. I have two fil...

TSOARSupport_0-1724837317574.png

Resolved! Integration Sentinel One <> XSOAR

Hi everyone! How are you? I have a problem with the integracion of Sentinel One from XSOAR: In Sentinel I have a few rules for some Incidents. One rule closes the incident as soon as it is discovered by the platform, that is, the incident is created on the platform and the rule that closes it is automatically executed. I can summarize the proble...

Screenshot 2024-08-22 102854.png

Resolved! Cortex XSOAR V8.7 Back Up

I'm unable to find any backup options for the cloud-based Cortex XSOAR V8.7 platform. Could you please provide any guidelines or resources on how to create a backup? My license is going to expire soon, so I need to ensure I have a proper backup in place. Cortex XSOAR #backup

Resolved! Command Line syntax question

How do I combine commands on the #XSOAR command line? If one command wants a list, I would like to call a list, not enumerate it on the command line. For example, the RandomElementFromList works like this: !RandomElementFromList count=1 value="banana, orange, potato" may randomly respond with "orange". Easy Peazy. getList works like this:...

BRowe_23 by • L1 Bithead
  • 2589 Views
  • 3 replies
  • 0 Likes

Help with Cortex XSOAR API

Hi everyone, I'm currently working with XSOAR API, and I'd like to get some help in this way. I gotta gather all the data from a specific dashboard. I know that there is one API endpoint that I can use for it but, the documentation does not explain properly how to use each endpoint in XSOAR, and I can't do any request correctly. For example,...

SergioPalacios_0-1724228708500.png

JavaScript vs Python scripts

Hi everyone, Lately, I was wondering about Python and JavaScript performance in terms of computational speed and XSOAR resource use. I'd like to work as efficient as possible and that's the reason I'd like to ask for the XSOAR community thoughts. I'm currently working with Python 3.11.9 (main, Aug 2 2024, 14:46:25) [GCC 13.2.1 20240309] (I d...

  • 1310 Posts
  • 46 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks