Cortex XSOAR Discussions

Cortex XDR Incident

Hello everyone, we started dealing with Cortex XDR and after getting the furst Incident, I am kinda lost. I am not even sure whats the issue, there is a lot of "information" on the management console. For example, the Incident, under "Key Assets & Ar

If a pre-process rule fails how can it been seen if the incident hasn't been created?

Hello,

If a pre-process rule fails how can it been seen if the incident hasn't been created?

Could be that the the incident is created anyway?

Just to set in context:

A pre-process is created to introduce the playbook procedure documentation in the

Send Report to Slack

Hi,

I want to send the report created from Dashboard&Report section via slack. Is this possible? I only saw mail configuration.

How to count the playbook

We have a question for how to count the playbook?

We have a function with 3 product and 3 version.
How to count/quantify the playbook? Is 3 product X 3 vesrions =9 playbook?

For the playbook should different versions/bands be in the different playboo

Problems with the Integration "QRadar v3" - Mirroring not working and qradar-reset-last-run command not working

Transformer to delete line breaks in a string

Hello,

Some data is introduced in XSOAR with line breaks. Example:

data1,

data2,

data3,

data4

This data is joined with "," to be introduced in a task. However, data is not parsed correctly and the line breaks are introduced, causing an incorrect

Obtain payloads bounded by time and IoCs of Cisco Firepower from XSOAR

Hello,

We'd like to use Cisco Firepower integration to obtain extra info for our playbooks. However, we can't find the proper command to get the payloads of an event. 

XSOAR Incident Opened Time

Once a XSOAR incident is created, how can we find when a user actually clicked & opened incident for the first time?

Is it possible to change the Section Header color?

Change the Section Header color in order to create visual alerts in the playbook.

Adding user to Team members of an incident by python script

Hello, 

There is the section "Team Members" with two fields "Owner" and "Participants".

I want to add some users to "Participants" but there isn't this field in the context data.  

I found in the documentation https://docs.paloaltonetworks.com/cortex

How to pass username and password to the web scraper automation in XSOAR

Hi,

The URL I wanted to web scrap requires authentication, can someone help me to pass username and password to the WebScraper OOTB automation in XOSAR.

Thanks.