This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Start a conversation

[DemistoClassApiModule] Why CustomFields in demisto.incident()

Why is there a separate dictionary returned from demisto.incident? Does it matter whether a field is custom or builtin demisto.incident()['CustomFields']['myfield']I am asking this because I am thinking about implementing a custom function in CommonUserPython to grab field values without worrying about if the field is custom or built-in. Would t...

Multi Tenant Automation

Hi, Is there a way to run XSOAR automations across all tenants without having to place (push) the automation into all the tenants? If I wanted to write a script to pull all incidents across all tenants, how would I do that? Thank you.

Resolved! Question regarding using common argument "execution-timeout" in the python code.

While running a command in the XSOAR, there is a common argument named "execution-timeout" which increases the timeout for the command. Can I use this argument directly in the python code? What I want to achieve is, I have one command which is taking more than 5 minutes (which is the default timeout for a command) to complete. Now, I don't want ...

Resolved! Copy Paste Task between playbooks

Is there a way to copy/paste tasks between playbooks? I have many occasions when similar task logic can be reused elsewhere (and I am not talking sub-playbooks here) and the quickest way to be copy/paste the task in the new playbook. However the copy function seem to be limited to a current playbook only, dragging the task to different playbook...

Antanas by • L2 Linker
  • 3798 Views
  • 2 replies
  • 1 Likes

Mulesoft integration with XSOAR

Hi, I wanted to integrate Mulesoft with XSOAR, Since Mulesoft is not available in XSOAR marketplace, looking for Mulesoft' s REST API documentation or connector which will be helpful to develop custom integration in XSOAR. Can you help me to get those details if you have already developed custom integration for Mulesoft. Thanks in advance.

DP696 by • L2 Linker
  • 2122 Views
  • 1 replies
  • 0 Likes

update-remote-system command not getting triggered

Is it necessary to add a tag to the entry or comment in XSOAR to get it mirrored on remote incident?Suppose, I do not add a tag to a note/war room entry, then do I get that entry in the "UpdateRemoteSystemArgs"? Currently, I am not getting that entry in the "UpdateRemoteSystemArgs". Is it so that I have done something wrong in configura...

Resolved! Execute playbook using an instance

Hi, we have an integration with different instances, and we want to execute a builtin playbook, inside another playbook, but we need to indicate which instance we want to use. The playbook does not have an "Advanced->Using" Field. Is there any way to set the instance? Or maybe do i need to clone the playbook, create an argument for the instan...

MTubia by • L1 Bithead
  • 2296 Views
  • 1 replies
  • 0 Likes

URLscan.io's SOAR spot: Chatty security tools leaking private data!

Community, have you noticed that we may be accidentally exposing confidential information of the users we protect by submitting URLs for analysis to URLscan.io? Credits to: FABIAN BRAUNLEIN Sensitive URLs to shared documents, password reset pages, team invites, payment invoices and more are publicly listed and searchable on urlscan.io, a se...

urlscan.PNG
XSOAR CONFIG - Prevent.png

Resolved! XSOAR Multi-Tenancy Architecture and System Requirements

Hi, I am planning to deploy 1 main machine and 4 host machines. I'll keep all the tenants in the host machines so the main machine won't have any tenants (I read somewhere that this is the recommended deployment). I want to save resources if possible so what is the minimum system requirements for the main machine with no tenants? The multi tenan...

  • 1305 Posts
  • 45 Subscriptions
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks