Hi, i want to restore index in a specific tenant. I will use this parameter but idk if i write -restore-index-name=demistoidx, is it true?-restore-index-name=indexName
I have a sub-playbook that checks if a list exists and if not, fetches data from an external API and saves the result to that list, the next time the playbook runs it will load it from the list rather than fetching from the external API. I want this list to be named based on the current month, but am unable to make this work as it seems I need n...
Hi Everyone, Is there any possibility within Cortex XSOAR to pull updated hash values of unwanted software from unit42? Scenario: If we have a list of hash values of unwanted software (like Team viewer for eg) and we enrich the hash indicators using unit42. Now, in future if the software is updated, could we possible fetch the updated hash v...
When setting up my account, I must have quickly clicked through my 2nd factor options and now I'm stuck using email for my 2nd factor. I'd like to switch to using an app such as Google Authenticator. How can I change it?
Hi team, Is it possible to create a local user without email invite? The customer is using XSOAR on-premise v6.12. They have a contractor (which does not have account in our AD) that we need to create a local user for, but I don't see the option in the UI to create users without email invitation. They do not integrate with any email serve...
Unable to read the file via remote access with service account Cortex XSOAR ID: 4893410215349833399 We created a service account with /usr/sbin/nologin in /etc/passwd but was unable to read the file in /home directory. However, we managed to read it upon changing it to /bin/bash in the said file. Kindly advise if we can read/write the file in UN...
Looking for a dashboard to pull bandwidth usage from PANOS into XSOAR.
I am trying to integrate Virus total v3 in xsoar and have api key already. As you know in v3 version of virus total we cannot adjust server url so thats why I am getting issue please check and provide your useful answer Verify that the server URL parameter is correct and that you have access to the server from your host. Error Type: <reques...
Hi Team, The customer has only Standard license I couldn't able to move to CS team. Your help will be appreciable. The customer have a master playbook that is run on every single case raised on the platform. This master playbook contains many tasks assembled in a flow chart that may and may not run upon the playbook being run depending on the ...
Does anyone mind sharing any resources or practical examples of how they're using XSOAR to transition events/incidents across multiple analysts or shifts?
I have a couple different use cases where I have several steps in a playbook that I would like to complete again after the playbook is complete. I basically have several steps in a playbook that I would like to have launched by a button. I am trying to avoid the lengthy process of converting the steps to a standalone script. Plus, it is much eas...
Does anyone know and can share if there are websites or communities like this where playbooks used in Cortex XSOAR are shared? I'm not talking about code, but flowcharts etc
I have installed system diagnostics and health check content pack from marketplace(using xsoar version 6.12). I have followed the steps given in this article: https://xsoar.pan.dev/docs/reference/packs/system-diagnostics-and-health-check The pack has a playbook "Health Check", I am executing that playbook by creating a manual incident. I am gett...
Hello Live Comm, I am working on a use-case that allows us to extract indicators from specific reports and then pushes them to monitoring systems. We have seen that using the built-in Extract Indicator command causes domains to be extracted from URLs. Is there a way to allow only domains that are not in a URL to be extracted? I can see that you...
We have the Servicenow V2 integratoin enabled and we are able to retrieve "comments' but "work_notes" are not visible. - No errors are observed (it's just empty)- We are able to "add" work_notes from XSOAR. - We verified the permissions of the accounts being used in ServiceNow and no restrictions. - The "Use Display Value" checkbox is selected. ...
