This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Start a conversation

Teams integration in xsoar

Hi , I have few queries reg teams integration in xsoar. If we are integrating teams Using Cortex XSOAR rerouting1. what port should be opened from XSOAR2. What Urls should be whitelisted from XSOAR 3.if we are Creating the Demisto Bot in Microsoft Teams from Microsoft Developer Portal we will be able to generate client secret , should this be ad...

Import XSOAR incidents into MySQL DB

Hello all, I have MySQL DB to collect data from different projects/products and using Metabase to create dashboards. I would like to import all incidents into MySQL DB from XSOAR. Is there any integration can do it directly or I have to write python code to retrieve all incidents through XSOAR API? If API is the only option, should I use "Se...

ce13 by • L1 Bithead
  • 1830 Views
  • 2 replies
  • 0 Likes

Cannot Impersonate user using the EWS O365 Integration in XSOAR

I'm trying to send mail from our service desk address and everytime DBOT produces an error "The user account which was used to submit this request does not have the right to send mail on behalf of the specified sending account., Cannot submit message." The azure app that the EWS O365 integration uses has the necessary API access to send mail a...

Splinter by • L0 Member
  • 2591 Views
  • 2 replies
  • 0 Likes

Resolved! Content package is not able to update

Hi Friends, we are trying to update the content package and integrate it with any package into XSOAR it's showing the error: Could not install pack: could not create content item from file 'Lists/list-PrivateIPs.json'. invalid content item type 'list' Can anyone help me to solve this problem? Regards Vinay Cortex XSOAR

VinayKumarTM_0-1677851287923.png

Resolved! Running XQL Query to XDR from an Automation Script : Receiving 500 Bad Synatax from valid query

Hello all, I am attempting to run an XQL query from an automation script. The query is valid and can be run manually and this works well both on XSOAR and on the Query Editor section on XDR. Essentially we refer to the query under a variable and then reference the variable under the execute command.... The error I receive is 500 - token recogni...

Propagation labels problem

Hi everybody, I am really having a hard time syncing content with tenants because propagation labels aren't working properly for me. To give you an example, I create an xsoarcommunity tenant and set the propagation label to carbon_test so that I can't sync cortex xdr content with this tenant by mistake. Palo Alto Networks Cortex XDR - Investigat...

EnesOzdemir_0-1657001869742.png
EnesOzdemir_1-1657001968955.png
EnesOzdemir_2-1657002019975.png
EnesOzdemir_3-1657002057104.png

Resolved! File upload from XSOAR war room to Sentinel watchlist

Hi, Newbie to Xsoar and working on an automation when a csv file is uploaded to war room, it should upload the csv to Azure Sentinel watchlist. From what I understand, I can do this by grabbing the file entry id of the latest file uploaded and then using the entry id upload it to Sentinel watchlist. Is there a better way to do this ? If n...

A_Menon by • L0 Member
  • 3252 Views
  • 2 replies
  • 0 Likes

'Failed to parse JSON object from response' while integrating Microsoft Defender for Cloud Apps with XSOAR

Hi,I encountered the error 'Failed to parse json object from response: b'\r\n\r\n<!-- Copyright (C) Microsoft Corporation. All rights reserved.' when trying to integrate 'Microsoft Defender for Cloud Apps' using client credentials authentication method with XSOAR. Can someone help me to fix the issue. Since its an OOTB integration I believe t...

DP696 by • L2 Linker
  • 4549 Views
  • 3 replies
  • 1 Likes

Export indicators with custom indicator fields

Our detection engineering team wants to upload a list of IOCs to XSOAR and get the VirusTotal scores of them as a csv file. Through an automation I am extracting and enriching all the indicators and running !ExportIndicatorsToCSV query="investigationIDs:47" columns="id,indicator_type,value,vtscore" VT Score is a custom indicator field. It ho...

Resolved! Error with Set Command context

Hi all the community,i face a problem when using set Command, you find bellow the error: ===ERROR DBotFebruary 15, 2023 12:09 PMScripts returned an error#2: add Test key to contextCommand:!Set key="test" value="abc" stringify="false" extend-context="incident"ReasonError from Scripts is : Script failed to run: open /usr/local/demisto/res/_script_...

play book set error.PNG
  • 1310 Posts
  • 46 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks