Getting data from multiple incident contexts?

Hi!

I want to extract specific key data from context of multiple incidents. The context key I'm looking for is not under "incident". Specifically, I have many incidents of type "Phishing" and want to output the contents of "Recipient Selection.Answ

Cortex XSOAR

Morning everyone,

I hope that you are doing well

I have a little problem. We have implemented the XSOAR in our customer environment and configure th EWS O365 content pack for phishing attacks but since we do not have a case, we cannot show to the

Ingest Taxii feed into XSOAR 6.12

Hi,

I am trying to ingest our taxii feed into XSOAR 6.12 with following steps:

• installed XSOAR 6.12 on ubuntu 22.0.4 LTS
• launched the web portal, and installed TAXII Feed (1.x) pack from marketplace
• Ingest feed using "Integration Instance Settings"
  
  • T

Alternate Layouts based on IF statement

Is there a way to select alternate layouts in a case based on an if-statement?

new host does not appear in the ACCOUNT MANAGEMENT

Hi!
I'm installing XSOAR multi tenant environment. Currently its a Community edition for POC.
Installed main host and tenant host as per documentation. Both Ubuntu 22.04
I am unable to connect tenant host to main host.
Settings - account management - new

XSOAR remain open when an incident has been closed

Why does the browser window in XSOAR remain open when an incident has been closed? Is there a way to automatically go back to all incidents? e.g. to https://xsoar.dev/#/incidents

Did not get the expected value from test (85) issue with Remedy Integration

-

Hi,

While doing the customized Remedy integration test, getting-"Did not get the expected value from test (85)" but able to fetch the incident status via "remedy-incident-get incidentID", OAuth test successful via "remedy-auth-test" in playground t

Getting null in output

Hi,

I am using a splunk search automation and passing a query in input and I am getting appropriate result without any null value. So I have added a new task after that to convert the output in csv, I am using Exporttocsv automation, but here the i

Qradar Integration

Hi , 
Is there a way to make the the system pull incidents more often , 
now it takes about 3 min since the offense first appears in the Qradar until it appears in the Demisto.

Share indicators from one tenant to all

Hi, everyone:

I'm trying to use one of our tenants for Threat Intelligence and we want to share all the indicators obtained to the other tenants. Is there any way?