Live Backup encountered the following error on this host: [master] Failed live back on remote server [401]. DR authorization header does not equal con

Hi,

we've been having issues with Live Backup:

Live Backup encountered the following error on this host: [master] Failed live back on remote server [401], [{"id":"unauthorized","status":401,"title":"Unauthorized","detail":"The request requires auth

Symantec similar command for FireEye HX v2 commands

Hi,

Can anyone help for this-

Which FireEye HX v2 automation command will give the equal output for below-mentioned Symantec command:

1. sep-endpoint-info( to Get Computer Info using IP & using Hostname)
2. sep-scan-endpoint(for Full Scan on Endpo

Is there a way to check on which drive the demisto application is installed on

Is there a way to check on which drive the demisto application is installed on 

Share internal list XSOAR with url

Hello,

We created an internal list in XSOAR called "urls". We'd like to create an url to share a link with the data of the list. How can be this done?

Uploading report via demisto api post request

Hello everyone,

I am trying to upload json file to create report. Despite I tried tons of way I couldn't send the body properly. demisto-api-post request need multipart/form-data content type. Is there any way to send raw json properly?

Here is m

Paint markdown table cells or rows

Hello,

We use markdown tables to show the analysts' incident data. We use them for manual tasks in details as in layouts. We'd like to paint those cells where the data shown is critical. For example, on a markdown table where some hashes are detonate

XSOAR Threat intel IOC Ingestion to Splunk

Hi,

We have created EDL query to ingest IOC to the SPLUNK from XSOAR Threat intel management Platform.

We have to know that Refresh List will work  and how to get all IOC via EDL query from XSAOR

Kindly share any best practice any one implement

query(group) indicators by domain name

If I have a tenant/account that has incidents.

some of those incidents have indicators / entities tied to abc.com or xyz.com

Is there a way to query for, show me all the incidents that have hostnames or account names that end in abc.com?

Wasn't having l

Move War Room Entries section

Hi all!
I want to move this section to a different tab in the layout. How do I do that?

I've tried using the War Room Entries section to the tab where I wanted it to be, but the filter 'URL Enrichment' is not listed. Any tips?

Thanks!