Resolved! Is it possible to use nested variables in XSOAR?

Hi all,

A customer of ours is trying a curious thing and I am not sure if it is possible in general, so I guessed the best way would be to ask right away. Our customer created a XSOAR list, that contains a html string with context data variables in it

Resolved! XSOAR Qradar Ingestion

I am attempting to ingest Qradar into the XSOAR using the Integration. I need to pull custom fields from the SIEM  and what I need to understand is as follows;

Is it preferable to pull these fields within an AQL Search at the playbook stage ?

Or is it

Resolved! Delete emails in Exchange 2013 Integration

Is it possible to automate deletion of phishing emails if the backend Exchange server is Exchange 2013? I noticed there is an integration for Exchange 2016 but I did not find one for Exchange 2013.

Resolved! conditional check if Azure Entities command returns with "No entries."

Any thoughts on why this is failing; this always returns Entries Found regardless if there are entities or not.

You can see in the screenshot above there are 0 results, no entries.

When I run this script, you'll see the screenshot below.  

------Scrip

Resolved! ReadPDFFile V2 gives error when reading PDF file

Hi everyone,

I was trying to make a playbook to extract indicators (Hash values, domains, IP addresses) from a PDF file. I tried to use the ReadPDFFile V2 utility, however it gives the below error on 2 of the PDF files I tried.

Resolved! XSOAR Trigger off reopen incident / close incident

Onboarding to a new company.
No post processing on incident type (azure sentinel).

When a ticket is closed on the close form, we have a custom "Azure Closure Reason" and "Classification Comment"; based on this we have a script(CloseSentinelCase) that t

Resolved! How to check custom indicator types with !GetIndicatorDBotScore?

Hi everyone,

does anyone of you know how to check a custom indicator with !GetIndicatorDBotScore?

Due to the recent change in the URL indicator type's regex, we needed to create a new indicator type, that makes use of the old regex. Unfortunately this