Resolved! xSOAR - Incident Search Syntax that doenst include incidents which triggered in the last 15 minutes

Hey all!

I'm running a report daily which shows incidents that are still active. The idea is that we'll catch incidents that might have fallen through the cracks somehow.

It works well for the most part, but it shows incidents that analysts are

Resolved! XSOAR Sessions and Submissions option

Hi,

I came across this documentation regarding XSOAR

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-9/cortex-xsoar-threat-intel-management-guide/unit42-intel/unit42-sessions-and-submissions

Resolved! Create pdf or word file from html body

Hello,

I'd tried to find a task inside XSOAR, however nothing was found. Some clue how to do it?

Resolved! Insert logo when mail is sent from XSOAR

Hello,

A playbook is creating an email with data to deliver in html, however we can't find the way to introduce the logo of the company inside it. What path should we add to the tag "<img src="*****"> to obtain the logo in our local folders?

Resolved! Defining Multiple Engines for Communication Tasks

It is of my understanding that you can set server configurations on the XSOAR Server and on a single engine to provide the links and responses through the engine that acts as a proxy. In a single server deployment with multiple engines can you manage

Resolved! Meaning execute automation with "Run on a separate container"

Hello colleagues,

When executing an automation, there's an option called "Run on a separate container". We'd like to know which are the main differences about using it.

Resolved! Read Email Body

I am trying to write a playbook that will read the email body and understand what the email is related to base on keywords or patterns. Is there a script or integration that could do that? My best idea is to use Machine Learning for it, but I am not

Resolved! How to prevent incidents from creating from every alerts in Integration

Hi All,

I configured an MSSP integration which polls the same for alerts created on that platform and creates an incident out of them if present.

The thing is I want to create an incident for one type of alert (it has a keyword category). For the oth