How to Find and update existing incidents through Integration

Hi,

We are providing partner integration for our product and this is the requirement.

My product # generates/creates 'Cases' which are pulled inCortex XSOAR  as incidents using fetchIncidents call. It might be possible that sometimes a 'Case' in ou

Trigger a usecase by sending an email to an email address (Dedicated) owned by Paloalto

I would like to explore an option to trigger a use case by forwarding or sending the email to a cortex email address (Dedicated) to a client and trigger a playbook from there.

(Something like client@paloalto.com) and then it creates an incident and

Getting Started

Greetings--

I'm a data analyst who is adept at using tools like Tableau, R, MS Access, MySQL, and PowerBI to analyze both large and small datasets to find patterns, tell stories, visualize data, etc.  A cousin who first got me on the path for administ

Function to get the date when "Common Scripts" were updated

Hello,

We'd like to to get the date when "Common Scripts" were updated. Is there any function to get it?

XSOAR platform video technical walkthrough video

Hi Team,

Looking for a technical walk-through video of the XSOAR platform, not marketing videos.

Can anyone help me by sharing the video link here?

Getting output from splunk query as an attachment

Hi All,

I am running a splunk search query and I want the query's output in the form of an attachment to be used as input for the next task. How should I do that?
Please assist..

Thanks

Himangi

Problem with AppendindicatorFieldWrapper script

Hi!

When we run the appendIndicatorField task, the last IP address of an array never gets tagged. Please see the following examples for clarification:

Example 1: works fine

!appendIndicatorField indicatorsValues="134.122.135.178" field="tags" fie

Browserling integration

Dears,
we are trying to integrate with browserling which is not supported by default on XSOAR marketplace.
and to this integration we need to do the following:

1- First, we need to load browserling.js library.
2- Then we create a new Browserling object w

need steps to create MITRE ATT&CK CoA - T1110 - Brute Force playbook in cortex XSOAR

Cortex XDR Crowdstrike Layouts

Hello, I have just onboarded the crowdstrike integration into Cortex XDR. I am looking to modify the incident layout of the incidents themselves and the option is not available. Instead, inside a Crowdstrike Incident I have to usually go to Crowdstri