How to Find and update existing incidents through Integration

Hi, We are providing partner integration for our product and this is the requirement. My product # generates/creates 'Cases' which are pulled inCortex XSOAR as incidents using fetchIncidents call. It might be possible that sometimes a 'Case' in our product gets updated and gets pulled in XSOAR again. The custom attribute used here is caseId ...

Trigger a usecase by sending an email to an email address (Dedicated) owned by Paloalto

I would like to explore an option to trigger a use case by forwarding or sending the email to a cortex email address (Dedicated) to a client and trigger a playbook from there. (Something like client@paloalto.com) and then it creates an incident and we can trigger the playbook from there. Is there a way to do this? Cortex XSOAR #Playbook_Tr...

Getting Started

Greetings--I'm a data analyst who is adept at using tools like Tableau, R, MS Access, MySQL, and PowerBI to analyze both large and small datasets to find patterns, tell stories, visualize data, etc. A cousin who first got me on the path for administering Palo Alto firewalls unwittingly set my path toward Cortex XSOAR # as well. Looking for adv...

Function to get the date when "Common Scripts" were updated

Hello, We'd like to to get the date when "Common Scripts" were updated. Is there any function to get it?

XSOAR platform video technical walkthrough video

Hi Team, Looking for a technical walk-through video of the XSOAR platform, not marketing videos. Can anyone help me by sharing the video link here?

Getting output from splunk query as an attachment

Hi All, I am running a splunk search query and I want the query's output in the form of an attachment to be used as input for the next task. How should I do that?Please assist.. Thanks Himangi

Problem with AppendindicatorFieldWrapper script

Hi! When we run the appendIndicatorField task, the last IP address of an array never gets tagged. Please see the following examples for clarification: Example 1: works fine !appendIndicatorField indicatorsValues="134.122.135.178" field="tags" fieldValue="BlockPA" using-brand="Builtin" Example 2: tags IP 134.122.135.178, doesn't tag IP 43.1...

Browserling integration

Dears,we are trying to integrate with browserling which is not supported by default on XSOAR marketplace.and to this integration we need to do the following:1- First, we need to load browserling.js library.2- Then we create a new Browserling object with the session token.3- Then, we configure the browser.4- And finally, we embed the iframe conta...

need steps to create MITRE ATT&CK CoA - T1110 - Brute Force playbook in cortex XSOAR

Cortex XDR Crowdstrike Layouts

Hello, I have just onboarded the crowdstrike integration into Cortex XDR. I am looking to modify the incident layout of the incidents themselves and the option is not available. Instead, inside a Crowdstrike Incident I have to usually go to Crowdstrike itself to take any actions on an event from the XSOAR platform. All other incidents and integr...