Cortex XSOAR Discussions

Command "setList" issue introducing variables from context

Hello,

We're using command "demisto.executeCommand("setList",{"listName":listName,"listData":listContent})" in order to introduce data in a json list. Where the "listName" is a json list name and "listContent" is data extracted from the context.

Th

Convert Multiple Files

Hello, I am trying to convert multiple files with different extensions using the 'ConvertFile' automation, so that it can be display on the layout. However, when there are different types of files in one incident, it keeps giving me an error. What wo

A question from the Malware Pack v2 webinar: Malware pack playbooks optimization

Kudos for all the work on developing these playbooks. Are they optimized so the incidents don't get flagged under System Diagnostics (exceptionally big incidents, exceptionally big context, etc)?

Note: This question was asked as part of Cortex XSOA

A question from the Malware Pack v2 webinar: EDR alerts

How would you handle an EDR alert that involves more than one file? How does this playbook present this to the user?

Note: This question was asked as part of Cortex XSOAR Customer Success Webinar: Malware Investigation & Response V2 

A question from the Malware Pack v2 webinar: Misclassification rate

How do you address the extremely high misclassification rate of both file detonation (any semi-sophisticated malware won't divulge any information in a sandbox) as well as the high misclassification by Virustotal (both FP and TP)?

Note: This questi

fatal Error during ensure repo

Hi everyone,

I am facing a strange issue. I was trying to change the certificate like explained in this link https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-admin/installation/post-installation-checklist/https-with-a-signed-cert

How to Export list of users who have access to xSOAR along with their last login

Hi All

How can i export the list of users along with their last login

In Seetings > User and Role > Users I am able to see the list of users

But i dont see an option to export this data

I want to export them to review each of them and get approva

Post-processing script to close XDR alerts from XSOAR in Mirroring Both Direction integration setting.

Hello,

We are using XDR with XSOAR mirroring both direction configuration. It's working. However, incidents created on XSOAR don't close all the alerts of XDR related to the incident. So a post-script should be done to force them to close. What comma