Hello everyone, I'm trying to get the free licence of Xsoar and i'm struggling. I didn't get the link, key or instructions. Please can someone help me with this. Cordially. Cortex XSOAR
Hello, I need your help. I need feeds for domain classification and another feed for phishing, to determine whether domains, emails have been compromised or not. What do you recommend for Cortex XSOAR What feed and integration people use??I need for indicators type: URL;DOMAIN;EMAIL;FILE
Hi Team, The customer uses the XSOAR in High Availability using OpenSearch. and the number of app servers is 2. So is it possible to upgrade the XSOAR not stopping the server? For ex) Stop the App server 1 and upgrade the App server 1 first, an start the App server 1 with the upgraded version, and second stop the App server 2. and upgrade th...
I just had our instance migrated to 8.5. during testing we figure out that we could not update our engine using the shell program and need to do a zip deployment. The basic instructions for ZIP does not support multple engines on the same host. Here is our solution If see problems please comment xsoar create zip archive "d1_ENGINENAME".zi...
Recently I was trying to install Oletools pack and got an error:Could not install pack: Get "https://marketplace.xsoar.paloaltonetworks.com/content/packs/Oletools/1.0.5/Oletools.zip": x509: certificate signed by unknown authorityTrying other packs, same error.I never changed or updated default PA certificate.Cortex XSOAR
Hey Community,we're encountering an issue with wildfire instance where the upload file command is throwing an error that " scheduled entry timed out" in the playbook . Please find the attachment for error snap .
Hi Team, I have a customer where there are lot of big incident, (>10mb). Is there any function that automate to delete the big incident? In system diagnostics, the big context and big incident, they want to delete them, automatically. Is it possible? I am waiting for prompt response. Thank you.
I need to update content pack of microsoft online exchange and thats why I updated content pack with dependcy and push it to production but when i did syn on other tenant the integration page seems empty please any info...Thank you Cortex XSOAR
I am on Cortex XSOAR V8.5 using the Generic Webhook 1.0.28 896436 integration in conjunction with Microsoft Forms and Power Automate to automatically pull incidents and run playbooks. So far, I've been able to successfully pull incidents, classify them to an incident type, and automatically launch a playbook, but no matter what I do I cannot get...
Hello,I would like to create an HTML template inside XSOAR (using a list) and adding a html image to it. I would like to know, if there is any local resource in where i can save the image and then import it in XSOAR, or it has to be done in a public url. For the other side, I would also like to know if it is possible to render an HTML inside a l...
Hey Community,we're encountering an issue with wildfire instance where the upload file command is throwing an error in the playbook . Please find the attachment for error snap .
XSOAR stopped fetching incidents from our assigned email address on April 3rd. I opened the EWS O365 instance to investigate and did a "test" for troubleshooting and the test result shows: Error (April 9, 2024 11:14 AM) Not allowed to access Non IPM folder. (85) We did not make any settings changes to the instance. After doing some research...
We fetch incident with Splunk Add-on. What should I do to enrich and map it? How can I run the mapper here? or do I need to proceed with setincident commands? #SplunkAddon Cortex XSOAR
Hi! We have a playbook which extracts indicators and adds it to a certain watchlist. In between, we allow user to select which indicators should be added by using Data Collection - Multi select / Array reply option. It is quite problematic slecting it manually when the selection is large, e.g. 100 entries. Is there a way to add a "Select all" ...
Hello there, I am going to have cortex XDR multi-tenancy on one XSOAR. however I cant switch between cortex XDRs on XSOAR. I would be grateful if you could help me in this field. And another problem is that, the configuration of Cortex XDR-IOC, I took an error of unauthorized access, user doesnt have the required license type to run this API. ...
