Uploading the IOC's File A and file B in playground-war room via CLI Command box attachment file upload option. How to append the two IOC's File A and File B
Hello We have build a CICD Pipeline to manage Lists in a external Git-Repository. The reason for that is we want to have the option to let our analyst create message templates and config files in a versioned way. Also we don't want that our analyst have to handle the deployment of that files. Until now the external repo was relativly small and ...
Hello i plan to implement a custom integration which fetches IP Indicators. So far so good i was able to create the indicators with no issue. However i would like to update some fields eg. Hostname and also some custom fields like a Gridfield of Vulnerabilities. But for some reason i can't update any field by side the verdict. Thats my func...
Hi Team, Preprocessing rule "Link and Close" category Rule configured : Link to oldest incident Created within the last 5 Minutes Issues on the preprocessing rule : 1. 2 incidents are created at the same time, both are closed . None of them has open incident and other one as linked incident 2. For the one's that are linked, they are not accessib...
Hello all, We've a situation that we would like to clarify if it's a misconfiguration or if it is an expected behaviour.#Qradar integration is only fetching ofenses that includes specific rule ids but qradar how it works associates new events and new rules while we do not close the offense.This causes that for example, the rule that triggere...
We have been building a playbook to decrypt all encrypted attachments and detonate in a wildfire and Mimecast sanbox using their integrations. I am struggling currently to remove jpegs and pngs from the context data so they are not being sent to the sandbox for detonation. I have a condition that loops through all the files after pulling them do...
Hi Good Day, I have question regarding XSOAR Community Edition, I already request for Community Edition but while waiting for that, i have some question regarding version that community Edition use, is it version 6 or version 8?
Hi Everyone, we are integrating the XDR with XSOAR we are facing script error. Kindly find below attached error message of advanced test full report and screenshot of kindly guide us. Executed: test-moduleInstance Cortex XDR - IR_instance_1b262b3c8-5968-43c8-8c7b-c94d9a62a249Arguments {}Start time 2024-06-13T11:27:29.47131302Z Exception m...
I have an XSOAR 8.5 instance with a playbook which makes use of the GoQR.me QR Code Reader integration. It had been working nicely in the playbook for months, but has begun to misbehave. In the playbook, images are extracted from a phishing email and stored in XSOAR, and the IDs of the images are fed through !goqr-read-qr-code-from-file entry_...
Hi Team, I have standard customer, their requirement is [HK][CCBA][232689][Finetune XSOAR playbook - Update the Group Member] Customer informed that existing playbook flow is XSOAR will get the group member list from 1 device, and update the member list, then XSOAR will deploy the updated member list to ALL Fortinet devices. Customer want to ...
I have two master playbooks, the first which runs a set of playbooks, which initiates some external jobs. These jobs can take a number of days to complete, but if run as a small subset, may only take an hour or two. So, after this first playbook sequence finishes I'd like to be able to create some kind of "process" that will constantly poll fo...
I'm making a request in an integration to an external API return self._http_request( 'POST','export/download', headers={'accept': "application/octet-stream", 'content-type': "application/x-www-form-urlencoded"}, data=payload) and I get back a data stream - it's looks like it should...
Hi, I am creating a playbook with the objective of integrating Cortex XSOAR and Cortex XDR. The idea is for Cortex XSOAR to query Cortex XDR , retrieve all the assets detected by the broker scanner, and verify which assets do or do not have the XDR agent. Does anyone know if this is possible? My idea is to use both solutions to achieve as muc...
Hi Team, After pushing content from Dev to Prod, we are seeing lot of errors in XSOAR. Could not create contentpack with ID 'ipinfo' and name 'ipinfo'. Contentpackmetadata with name 'Ipinfo' has the same ID 'ipinfo' as 'ipinfo' from content-pack 'ipinfo' Could not create contentpack with ID 'PAN-OS' and name 'PAN-OS by Palo Alto Networks'. C...
What is the count of maximum user accounts that can be created in XSOAR and XDR ? Is there any limit to create the user accounts ?
reaper
on:
I want to open the use case again
