MFA for xSOAR portal
Hello,
I am running the Community Edition and have not found anything concerning MFA for xSOAR users. What would be the preferred way to enable MFA for users like Analysts and Administrators?
Discussions
SAML 2.0 -> message signature failed
Hello
I do have problems to get Cortex XSOAR talking to our ADFS Server (Windows AD 2012)
Which certificate is here used? It should be, as fas as I understood, somewhere on Cortex XSOAR, but couldn't find anything...
Spoiler
...
Response from ADSF Server:
XSOAR HTTPS certificate issues
Hi All,
I have an issue where I have replaced the self-signed auto generated certificate in XSOAR, the problem is that when I reboot the server the web service doesn't seem to come up, there is no service listening on port 443.
Any help would be great
...Resolved! jira-issue-query (jira-v2) dosen't show all info in output
Hallo Community
My Jira request dosn't show all Info in the output but there is everything in Results.
Example: In the output I do see:
Spoiler
...
Ticket
[
{
"Assignee": "aaa",
"Creator": "bbb",
"Id": "12345",
"Key": "ccc-123",
"Status": "Open",
"Summary": "ddd"
}
[
{
"Assignee": "aaa",
"Creator": "bbb",
"Id": "12345",
"Key": "ccc-123",
"Status": "Open",
"Summary": "ddd"
}
T
Get "Details" from an Jira Ticket
Hello all
How do I get details from an Jira Ticket in Cortex XSOAR?
If I do some "get" and "query" I do get only these output, which I may use in further Tasks:
Spoiler
...
Ticket
[
{
"Assignee": "aaa",
"Creator": "bbb",
"Id": "1234",
"Key": "ccc-123",
"Status": "
[
{
"Assignee": "aaa",
"Creator": "bbb",
"Id": "1234",
"Key": "ccc-123",
"Status": "
Resolved! Cortex XSOAR: Add a Job: First Friday of the Month
Hello all
We are using Cortex XSOAR Version Version 6.0.0; Build 79522 and having problems to generate a valid schedule in the Jobs.
I would like to add a Job, which runs on first Firday of the Month.
The Human View part has no Monthly recurring tasks.
T
...XSOAR cant connect to marketplace
Hi
installed a new instance of XSOAR community edition - but cant seem to connect to the marketplace -
when i try curl to storage.googleapis.com
curl: (56) Recv failure: Connection reset by peer
curl to: https://xsoar.pan.dev works
the firewall is not d
Integration classifier by workflow
Hi,
I have been thinking about this a few times by now. I have a mail listener that fetches incoming mails as incidents. To classify them I would like to send them through a playbook, as a classification key doesn't provide enough context to choose th
...Docker issues with xSOAR
Hello,
A beginner here. It seems that after initial installation when trying to install new integrations and addons from Marketplace, I keep getting warnings about missing Docker images. If I list all the images with /docker_images I see the ones tha
...Resolved! Cortex XSOAR server not responding, listening only on IPv6
Dear all,
wanted to explore some features in the community edition, but the Web GUI doesn't come up.
Checking from the console, I see that the server is only listening on IPv6:
netstat -ant
Active Internet connections (servers and established)
Proto Recv-
Resolved! Service Now: creating ticket with a given ticket template
Hello all,
Our goal is to create a Service Now ticket from a playbook, using the Service Now integration, with a given ticket template (ticket template = ticket with predefined field).
To do so with the API we send a request to the following URL: htt
...Domain checker playbook
Has anyone written a playbook that would check the age of a domain, say via it's Whois creation date, and then do a task?*
*Originally contributed to dfircommunity.slack.com #playbooks channel by SteveC on Friday, May 15th, 2020 at 3:11 pm
Resolved! Add a war room filter for the main account tennant.
Hello all,
We're trying to edit the layout of an incident in the Main Account tennant in order to display output of splunk searches.
When adding the "War Room" section in the layout we're asked to select a war room filter from existing list (see belo
...
XSOAR web interface not working with GloabalProtect Clientless VPN
We have Palo Alto Global Protect set up and it works very well with various web applications, however it does not work with the Demisto/XSOAR web interface. It just shows a blank page, although all connectivity is allowed and I see packets flowing.
T
...Resolved! XSOAR blacklisting O365 senders
Hello guys,
When analyzing a phishing case, I would like to block a sender for all the company. I've read in the Microsoft doc and they say you can do it by creating a blacklist. I've not been able to find it in XSOAR.
Is there a way of doing that?
K
...
Copyright 2007 - 2023 - Palo Alto Networks