Obtain payloads bounded by time and IoCs of Cisco Firepower from XSOAR

Hello,

We'd like to use Cisco Firepower integration to obtain extra info for our playbooks. However, we can't find the proper command to get the payloads of an event. 

XSOAR Incident Opened Time

Once a XSOAR incident is created, how can we find when a user actually clicked & opened incident for the first time?

Is it possible to change the Section Header color?

Change the Section Header color in order to create visual alerts in the playbook.

Adding user to Team members of an incident by python script

Hello, 

There is the section "Team Members" with two fields "Owner" and "Participants".

I want to add some users to "Participants" but there isn't this field in the context data.  

I found in the documentation https://docs.paloaltonetworks.com/cortex

How to pass username and password to the web scraper automation in XSOAR

Hi,

The URL I wanted to web scrap requires authentication, can someone help me to pass username and password to the WebScraper OOTB automation in XOSAR.

Thanks.

Command "setList" issue introducing variables from context

Hello,

We're using command "demisto.executeCommand("setList",{"listName":listName,"listData":listContent})" in order to introduce data in a json list. Where the "listName" is a json list name and "listContent" is data extracted from the context.

Th

Convert Multiple Files

Hello, I am trying to convert multiple files with different extensions using the 'ConvertFile' automation, so that it can be display on the layout. However, when there are different types of files in one incident, it keeps giving me an error. What wo

A question from the Malware Pack v2 webinar: Malware pack playbooks optimization

Kudos for all the work on developing these playbooks. Are they optimized so the incidents don't get flagged under System Diagnostics (exceptionally big incidents, exceptionally big context, etc)?

Note: This question was asked as part of Cortex XSOA

A question from the Malware Pack v2 webinar: EDR alerts

How would you handle an EDR alert that involves more than one file? How does this playbook present this to the user?

Note: This question was asked as part of Cortex XSOAR Customer Success Webinar: Malware Investigation & Response V2 

A question from the Malware Pack v2 webinar: Misclassification rate

How do you address the extremely high misclassification rate of both file detonation (any semi-sophisticated malware won't divulge any information in a sandbox) as well as the high misclassification by Virustotal (both FP and TP)?

Note: This questi