How to send command (like !send-mail) between two tenants?

Hi all,I have two tenants. One of them is called A and one is called B. I have Mail integration on tenant B. How can I run "!send-mail to= example[@]example[.]com subject=Hello body=Hello body" from tenant A to tenant B? Is it done with demisto.inter

xdr-get-incident command date time dispute

Hello everyone,

I have a script that need to get incidents from server. 

MITRE ATT&CK Framework

Hi , 
Is there a way to automate the process of mapping every incident to its MITRE Technique ,
or it should be manual for every incident ? 

Extracting IOC from threat Intel Email

Hi everyone. I am new to this industry and I am looking for guidance on how to extract IOC from threat intel email body in Xsoar Playbook. Hoping if someone can help out. Thank you.

False Positives Microsoft Teams Large Upload

Hey,

I need your help.

We are receiving alerts "XDR Incident 945 - 'Large upload (generic)' generated by #XDR Analytics detected...

Basically, this appears when the user makes a call, shares documents, or shares their screen (using Microsoft Teams)

CrowdStrike XDR Use cases with Pala Alto Cortex

Hi Team,

Can you please suggest a few case studies where CrowdStrike XDR is integrated with Cortex SOAR and what were the areas and use cases that were implemented and helped the customer?

We wanted to present this to a management that already has

Per Month Query using Beve Query Syntax

Hi,

I am trying to take a sum of incidents over a given time, and divide this sum per month, using Beve Syntax.

I there any syntax that would give me a per-month break down?  So I can take incidents per month, and display them in a widget using a b

No remote "Content Repository" tab despite ui.version.control.show.remote = true

Hi,

I am trying to setup remote repositories, in a first step only the dev environment.

In About -> Troubleshooting I have set "ui.version.control.show.remote" to "true" (copy-pasting it from the documentation [1] and checking multiple times for ty

incidents pulling time

Hi , 
in my Qradar integration I don't have this parameter , 

I have enabled the "Long Running Instance" and still it takes too long for the incidents to be fetched.

Is there a way to manually configure the Incident Fetch Interval. 
I'm using IBM QRad