Transitioning Events/Incidents Across Analysts

Does anyone mind sharing any resources or practical examples of how they're using XSOAR to transition events/incidents across multiple analysts or shifts? 

Issue in health check playbook under system diagnostics and health check content pack

I have installed system diagnostics and health check content pack from marketplace(using xsoar version 6.12). I have followed the steps given in this article: https://xsoar.pan.dev/docs/reference/packs/system-diagnostics-and-health-check

The pack has

Extracting Domains Not from URL

Hello Live Comm,

I am working on a use-case that allows us to extract indicators from specific reports and then pushes them to monitoring systems. 

We have seen that using the built-in Extract Indicator command causes domains to be extracted from URL

Unable to retrieve work_notes from Servicenow.

We have the Servicenow V2 integratoin enabled and we are able to retrieve "comments' but "work_notes" are not visible.

 - No errors are observed (it's just empty)
- We are able to "add" work_notes from XSOAR.

- We verified the permissions of the accoun

Crowdstrike falcon incident fetching issue

Hi team,

In the crowdstrike builtin integration instance we have included the query to fetch detections as: status:['new'], but still the alerts with False Positive status are also getting fetched in XSOAR.

Host Doesn't Appear in Main Account

Hi all,

I have a multi-tenant production and i have created a host but this host doesn't appear in the hosts in the main account.

How can i fix this problem?

Delete File from War Room

Hi everyone,

I would like to ask is it possible to permanently delete the downloaded file in War Room? My team wants to make use of the Jobs function in XSOAR to handle files, and the file should be deleted in XSOAR after handling it.

Thanks,

Eliza

Access to XSOAR Community edition

Hello everybody,

after reading through some of the threads here, most people run into a similar issue as I did. 

Not receiving the URL to download - has anyone found a suitable solution? 

I used a company email, I waited a week for it to come aft

O365 mail Graph API Integration - Best Practices

Hey all,

I was exploring O365 graph API and wondering what are some of the best practices for this integration.

One thing we came up was to IP restriction (Palo alto IP) in Microsoft side.

Are there any other condition access policies that can