Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Qradar Integration

Hi , 
Is there a way to make the the system pull incidents more often , 
now it takes about 3 min since the offense first appears in the Qradar until it appears in the Demisto.

urlscan.io alternatives?

Hi all,

 

I'm looking for urlscan.io alternatives that are available in the marketplace. Ideally, something that'll allow "browsing" from a different location, like GeoPeeker.

 

Thanks!

Upgrade XSOAR Offline

Our environment cannot connect to the internet.

We have installed XSOAR 6.11 offline before, and now we want to upgrade to version 6.12.

So I would like to ask, can I upgrade offline?

I have read the official documentation of XSOAR and there is no me

...

Resolved! AzureAD/MS Graph User Expire Password

Anyone familiar with MS Graph User integration and using it to expire a password for a user, much like Active Directory Query V2 "!ad-expire-password"?

 

It appears the method with PowerShell is using Connect-AzureAD and updating the passwordProfile

...

Resolved! xsoar change incident owner

Hi , 
is there a way to put a listener on every incident , and every time an incident owner is changing - it will run a playbook or a script.
The incident owner can be changed at any time during the playbook of the incident is running.

Palo Alto Support Portal

I am new to xsoar and was wondering if there is an API to connect to the PA support portal.   My goal is to connect, register a device and input the host name, address etc... so I can pull down the licenses.    Thanks for all the help.

 

Michael

Custom Integration Based on Cert Authentication Giving Error "Got status code 500 with body x509: certificate signed by unknown authority with header"

Hi Team,

I have developed a custom integration on XSOAR as the integration is not supported by PA natively hence to authenticate with the API i'm using Certificate based authentication hence when i'm testing the integration it is showing me the below

...

Integration with LDAP Authentication

Hi,

I am trying to integrate XSOAR with LDAP authentication, in order to allow users to authenticate using AD credentials. But when i test the integration i am getting the below error.

 

 

Also let me know, that whether i can import users into XSOAR

...

nithink_0-1697455918444.png
nithin.k by L1 Bithead
  • 1153 Views
  • 1 replies
  • 0 Likes
  • 1275 Posts
  • 43 Subscriptions
Top Liked Authors