This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Start a conversation

Custom Integration Based on Cert Authentication Giving Error "Got status code 500 with body x509: certificate signed by unknown authority with header"

Hi Team, I have developed a custom integration on XSOAR as the integration is not supported by PA natively hence to authenticate with the API i'm using Certificate based authentication hence when i'm testing the integration it is showing me the below error. "Got status code 500 with body x509: certificate signed by unknown authority with heade...

XSOAR app integration with Microsoft 365 Defender

Hi, PAN has published an Azure AD app for both integration of Microsoft Defender for Endpoint (MDE) and Microsoft 365 Defender (M365D). The instructions to use the app are very clear and it works well for MDE but I had no luck for M365D. PAN reference a different app ID in the documentation specific to M365D but there's no instruction on how ...

Integration with LDAP Authentication

Hi, I am trying to integrate XSOAR with LDAP authentication, in order to allow users to authenticate using AD credentials. But when i test the integration i am getting the below error. Also let me know, that whether i can import users into XSOAR from my AD after successful integration with LDAP authentication. And whether the user must have...

nithink_0-1697455918444.png
nithin.k by • L1 Bithead
  • 1469 Views
  • 1 replies
  • 0 Likes

Facing issue when using !ParseCSV command

Hi guys, I am facing an issue when running !ParseCSV command as it is removing specific characters in a field value that is being displayed in the table output.For example, my parsed CSV contains the following: C:\Users\username_1\AppData\Roaming\Microsoft\Windows\Network Shortcuts\~$testing.xls However, after running the command, it shows up in...

Resolved! XSOAR - Simple Dev to Prod Job

Was looking at running a backup job for our custom content with the below playbook. https://cortex.marketplace.pan.dev/marketplace/details/XSOARSimpleDevToProd/ The issue with this is it checks for Demisto REST API to see if the instance Demisto Dev had been created. The Demisto Rest API has been depreciated, so the call !IsDemistoRestAPIInsta...

Resolved! XSOAR O365: All-mailboxes search *A Question from XSOAR O365 Webinar*

Any updates planned regarding the time to search all mailboxes through the integration? In large orgs with 30k+ mailboxes, search can take over an hour to two hours to search all mailboxes, not practical at all and a viable solution. Same search within O365, via GUI or powershell takes just minutes. This question was asked as part of our Corte...

rtsedaka by • L6 Presenter
  • 2121 Views
  • 1 replies
  • 0 Likes

Edit Splunk Search Output

Hi,I am running a query in splunk search automation, The output I am getting includes too many brackets. I want to edit the output and I want to further use that output in different task. Can anyone please suggest how can I edit the splunk search output.

Himangi by • L2 Linker
  • 2780 Views
  • 5 replies
  • 0 Likes

Resolved! Dev Content Repository update issues

Hello, I'm working in a XSOAR Dev to Prod environment. The connection from Dev to it's repository branch was broken a while back. When updating the password I'm getting the following message asking me to discard all of my local Dev changes. I tried connecting the dev side of XSOAR to it's existing branch, and also a new branch. Same ...

joshuajohnsonco_0-1696876657024.png

Unable to integrate Netwitness v12.2 with XSOAR Community

Hi Community, I tried integrating XSOAR with NW v12.2, but getting below error: 1. used this api link also, but no luck: https://192.168.11.131/rest/api/incidents 2. created new user "soar" with integration-server.api.access 3. both SOAR and SIEM can ping each other. local firewall and iptables are off. No idea, what I'm missing. Any sugg...

ricky1890_0-1697385650528.png

Resolved! XSOAR Pre-requisites

Hi, I am trying to deploy Cortex XSOAR in Centos 7.9 version. In the XSOAR help document there is a pre-requisite for the kernel versions of Linux, as shown in the screenshot below, But when i checked the Kernel version of Centos 7.9 it is 3.10.0-1160. Centos 7.x series doesn't have the mentioned kernel versions. What to do? Kindly suggest.

nithink_0-1695204114140.png
nithin.k by • L1 Bithead
  • 3078 Views
  • 3 replies
  • 0 Likes

Related to Cortex XSOAR Playbook

Hello,We have integrated QRadar with Cortex XSOAR. I am creating playbook that should be sending email to the Client for triggered alert. Now, I wanted to events fields, Virus total reputation that shows in analysis in the email body. Questions are,How to add event's fields in the email body via variables?How to add reputation from integrated TI...

  • 1308 Posts
  • 46 Subscriptions
Top Solution Authors
View All
Top Liked Posts
View All
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks