Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Resolved! SAML role configuration in XSOAR

Hi,

 

We are using SAML 2.0 integration for user authentication to XSOAR.

Can someone help to understand what value need to update on "SAML Roles Mapping" in XSOAR under Settings->User and Roles-> Roles.

 

Thanks,

Deepa

DP696 by L2 Linker
  • 1028 Views
  • 1 replies
  • 0 Likes

Convert Multiple Files

Hello, I am trying to convert multiple files with different extensions using the 'ConvertFile' automation, so that it can be display on the layout. However, when there are different types of files in one incident, it keeps giving me an error. What wo

...

axespera_0-1670353410461.png
axespera by L1 Bithead
  • 1282 Views
  • 3 replies
  • 0 Likes

Resolved! Make a section in layout a static list?

Hi all!

I've been looking at trying to make a section in a layout a static list, but could not find any easy ways to do it.

Essentially what I am looking for is:

I have a layout, in which I have a section called X. Now what I want is that every time an

...

Resolved! XSOAR NSlookup and ThreatVault info

Hi everybody,

 

is there a way how to get following information in XSOAR?

 

- NSLOOKUP - I have an IP address and need to get name from internal DNS server

- Threat Vault info - I have an information from the firewall (threat name and threat ID) and

...

Resolved! integration indicator pull limits?

Hi there,

 

I've just started testing threat feed integration in XSOAR.

For some reason, the integration instance was only downloading 100 indicators on each pull whereas the source has thousands.

Is it because my AWS instance doesn't have a license?

...

boweic by L0 Member
  • 1030 Views
  • 1 replies
  • 0 Likes

Resolved! Extract Indicators from context to Field

Hi,

I have one playbook where I'm using the Builtin ExtractIndicators Function to extract any indicator from one field, and it's working fine:

After this, I call more subplaybooks, and I want, from this subplaybooks, use this indicators for some act

...

MTubia_0-1669885597443.png
MTubia by L1 Bithead
  • 1807 Views
  • 3 replies
  • 0 Likes

fatal Error during ensure repo

Hi everyone,

I am facing a strange issue. I was trying to change the certificate like explained in this link https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-admin/installation/post-installation-checklist/https-with-a-signed-cert

...

arn_stoz by L0 Member
  • 4293 Views
  • 7 replies
  • 0 Likes
  • 940 Posts
  • 30 Subscriptions