Endpoint Antivirus Exclusion list

Dears,

Kindly need your support for the following:

• we need to install the below as security controls on our XSOAR server (RHEL8):

o McAfee Endpoint security (latest version) for Linux.

o Cyber Reason EDR.

• kindly provide what is the Antivirus exclus

CIRCL hashlookup (hashlookup.circl.lu) 1.0.0 3167802 returns error when no results

When the integration is used on non-existent hash:

!file file=2795b688bb5918e092e0ee33cd25aa98

Then it end with error:

Reason

accepting custom cert -failed

Have followed this kb however under instance, it is still unable to test successfully when unchecking the trust all certification options under the integrated instance.

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-admin/d

Create a PDF file from context

Hi,

I am trying to create playbook where IOCs are extracted and enriched and then values are send as a PDF file via email.

I reached the part where the IOCs are parsed and enriched, but I am stuck at creating the PDF file.

Is it possible to create a PD

XSOAR Integration with Cisco IronPort Email API - Code Missed on Backend

Hi Team, 

Can you please help here to integrate Cisco ESA(API V2)  with XSOAR . I have tried with the following integration from marketspace "Cisco IronPort Email API (Community Contribution)" which is developed using API v2. But unfortunately It pop

Error in Splunk integration Splunkpy

Hello everyone, 

While testing the integration of Splunk to XSOAR with Splunkpy, I'm getting this error:

Anyone know how to solve it?

Thanks for your support.

Communication Task Authentication failed

Hi,

I want users to authenticate in Cortex XSOAR before answering the form sent by mail like explained here https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-5/cortex-xsoar-admin/playbooks/playbook-tasks/communication-tasks/create-a-data-collec

Handling errors in a playbook

I'm looking to change the flow of my playbook not only if errors are encountered in my tasks, but dependant also on what those errors are. I found a tutorial on docs.paloaltonetworks.com that included this:

Step 3: For new tasks, in the Task Name f

Dbot Score for Virustotal IP check is always 1

Hey Guys,

I'm facing this issue that doesn't matter how malicious the IP is Dbotscore is being 1 for the VT IP automation,

Things I tried,

1. Setting a threshold in VT integration for 1.

2 . Setting the reliability to A+

2. Running the command