This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Start a conversation

an issue with Forcepoint web Security with Cortex XSOAR Integration

Hello Dears, I have an issue with Forcepoint web Security with Cortex XSOAR Integration. kindly find the logs:2024-03-26 10:36:37.6939 error Unable to do Http req to url : https:// :15873/api/web/v1/categories/start [error 'Post "https://10.200.30.242:15873/api/web/v1/categories/start": tls: server selected unsupported protocol...

fp web_Copy.png
ALabeb by • L0 Member
  • 3949 Views
  • 5 replies
  • 0 Likes

Resolved! Azure Active Directory users - Incorrect padding

I am trying to connect an Azure AD (EntraID) to Cortex XSOAR so that I can use the user-disable playbooks. However, each time I try to authenticate i get the below error Error in Microsoft authorization: Incorrect padding Please check authentication related parameters. Traceback (most recent call last): File "<MicrosoftApiModule>", line 1...

XSOAR EWS 2022 Integration

As you know, the current EWS integration is limited to Exchange 2019. Could you please confirm if there are any plans to extend support for Exchange 2022? Additionally, are there any recommended workaround solutions for implementing inbox monitoring with Exchange 2022 in the meantime?

[Cortex XSOAR] Integration TIM to SIEM Elastic

Hello Team, I have a case that must integrate indicator from TIM Cortex XSOAR to SIEM 3rd Party like Elastic. Is there any documentation about how to integrate indicator from TIM for Elastic? Because when I search in documentation from Cortex XSOAR there is a playbook to integrate indicator TIM just for SIEM QRadar & Arcsight. Thank you

A.Faruq by • L1 Bithead
  • 802 Views
  • 0 replies
  • 0 Likes

Resolved! Still waiting on XSOAR Community Edition + Cortex XDR lab access

Hello everyone, I signed up for the XSOAR Community Edition a few days ago and also showed interest in Cortex XDR for lab use. Haven’t received any emails or access yet — just got the usual “someone will be in touch” message. Is this still a thing for individuals who want to lab and learn? Just trying to get hands-on and mess around with it ...

XSOAR - Execute Commands in Transformer

Hello I was doing a transformer automation and I wanted to execute a command inside it and it works perfectly when I run it on the playground, however when I use it as a transformer it gives me the error Missing invoking entry (7) does anyone know how to execute commands in transformer automations? Is it possible? I'm just trying to execute a co...

Update XSOAR Incident via API - version issues

I am trying to update XSOAR Incidents via API, but am having issues with the Optimistic lock and incident versions etc. I can create incidents via API call and can also get the information from incidents via API. When I create a new incident in our Dev env, the version for the incident is typically showing as "-1" I have some incidents that sho...

kbratt by • L1 Bithead
  • 978 Views
  • 0 replies
  • 0 Likes

Looking for 2FA/MFA/OTP Solution to Support Authentication for Cortex XSOAR v8 (On-Prem)

Hi everyone, I'm currently exploring ways to enhance the security of our Cortex XSOAR v8 environment (deployed on-premise) by implementing an OTP / 2FA / MFA authentication mechanism for the login process. Here are the key requirements: The solution must be on-premise, allowing full control over the authentication process. It should ideally ...

Duxgbk by • L1 Bithead
  • 490 Views
  • 0 replies
  • 0 Likes

Export Playbook and Import

Hi, Iam trying to figure out how to perform the following: Export a playbook, overwrite some of its tasks (send-mail Exchange) and upload the playbook back to XSOAR. I found in Docu an API for playbook import as yaml but no export API. If Anyone could point me to any direction here, thank you very much! XSOAR Version is 6.12.0

Resolved! Pre Processing Rules Logs

Dear Experts, I have configured Cortex XSOAR to ingest cases/alerts, but for certain conditions, I want to prevent these from becoming incidents or triggering playbooks. I’ve created a script to drop alerts that meet specific criteria. However, I need to maintain a record of which alerts were dropped and, if possible, send notifications about th...

Syedhkt by • L2 Linker
  • 2558 Views
  • 2 replies
  • 0 Likes

Problem 1 in 1,000,000? I hope not

hello community! I hope you are doing well. I'm here to ask a question that PAN support didn't know how to deal with and maybe some of you have already gone through the same thing. It was Saturday morning and xsoar and its functions were completely frozen, absolutely nothing was running. As XSOAR administrator, this had already happened so I res...

  • 1310 Posts
  • 46 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks