Cortex XSOAR Discussions

XSOAR CPU been too High

For a while now, our DEV XSOAR server has been holding cpu percentage at 65%. 0 jobs, 0 active workers, less than 10 enabled integrations, and 99 containers. Why is it so high? Any help to diagnose or reduce this percentage is appreciated!

Resolved! Dynamic interactive multi select input inside a playbook

Dears,

We are trying to do the following scenario and we want to check if it is doable or not:

1- We have a phishing playbook.

2- We are extracting all the attachments that are included inside an email file (.eml file).

3- the extraction of the

...

Resolved! Check if XSOAR has connection to an URL

Which task can be used to check if XSOAR machine has connection to an URL that will be used for an API?

Not able to use the context of one closed incident in a new one using Debugger Panel.

Hello,

I'd like to use the information I have in a already closed incident into a new one I'm developing just to test it.

When I click in the "Debugger Panel"->"Test data" and I search by the id of the closed incident it doesn't show up.
Is there a wa

...

Resolved! python question about importing "msal" module

I want to be able to use this module with my automation scripts:

msal: https://github.com/AzureAD/microsoft-authentication-library-for-python

import msal
by default fails as the module is not installed or available by default.

How would i manual

...

How would you trigger a script off when a dbot "note" is added to an incident?

Does anyone have any thoughts on how you would monitor a chat/note that's added to an incident.

Ultimately, i need to create a trigger script for some automation to occur once that new chat/note is added.

Resolved! Indicator enrichment detail in layout

Hi,

In one of our playbook there are 2 enrichment type of integrations deployed for ip enrichment (virustotal and abusedb) all works well as expected and they feed indicator itself but shows only verdict in indicator layout although these enrichmen

...

Playbook task naming in subplaybooks

Hi!

I can't find much data on Subplaybook naming numbers - how are they being assign and when do they change?

I've run into the following issue: i had a standalone playbook with some subplaybooks inside. In the main playbook I've been referring to

...

Upload Malicious and Suspicious Indicators to Ticketing System

Using a script How to get only the malicious and suspicious Indicators and which Threat intelligence feed that identified them as Malicious to be uploaded to ticketing System?

Resolved! Get command arguments in Powershell scripts

Hi all

I'm trying to get Command-Arguments in a self-made script in Powershell.

On Python it is:
demisto.args().get('<command-argument>')

What is it in Powershell? Because I tried it with:
$demisto.Args()["<command-argument>"]

But this didn't worked on

...

Question on Implementation with Bash Automation

We created a Bash Automation that we would like to automate within XSOAR. I see powershell as an option as a language, but not bash. Am I only allowed to create automations with these 3 languages (python, js, powershell)?

Thanks for any help!

Resolved! Upload IOC from file to firewall via XSOAR

Hi,

I want to find a way of maximum automatization of the next process: IOC are extracted from CSV file to Cortex XSOAR and than only this indicators are uploaded to firewalls.

I found automations for each step separately but maybe exist any pl

...

Fail to connect to Marketplace

Hello,

Having installed XSOAR v6.8 in RH7.6, also configured Docker too.

Proxy and internal DNS is required in our environment.

Configured the Proxy on both WebUI and Docker as well.

We could login to GUI, but we cannot reach the marketplace.

Found

...

Resolved! CrowdStrike Falcon detection mirroring

Hi there, I hope to find some help here.
We are facing issues to make the CrowdStrike Falcon mirroring options work. @
We are following the instruction provided in the documentation https://xsoar.pan.dev/docs/reference/integrations/crowdstrike-falcon

H

...

Credential management in XSOAR

Hi,

How are the credentials for the integrations handled within the product? I.e., are passwords and keys stored in the cloud?

And how are these managed securely?

Thanks,

Cortex XSOAR Discussions

Discussions

XSOAR CPU been too High

Resolved! Dynamic interactive multi select input inside a playbook

Resolved! Check if XSOAR has connection to an URL

Not able to use the context of one closed incident in a new one using Debugger Panel.

Resolved! python question about importing "msal" module

How would you trigger a script off when a dbot "note" is added to an incident?

Resolved! Indicator enrichment detail in layout

Playbook task naming in subplaybooks

Upload Malicious and Suspicious Indicators to Ticketing System

Resolved! Get command arguments in Powershell scripts

Question on Implementation with Bash Automation

Resolved! Upload IOC from file to firewall via XSOAR

Fail to connect to Marketplace

Resolved! CrowdStrike Falcon detection mirroring

Credential management in XSOAR

A Few Quick Questions About the Community Edition

How to work on File Content collected from Azure blob in Playbook

Powershell Modules in Xsoar Cloud

Azure Active Directory users - Incorrect padding

XSOAR 8 + Export Data to On-premise for Retention Compliance

Re: XSOAR - Transform Language

How can i trigger playbook once Indicator has beed added?

Re: How to work on File Content collected from Azure blob in Playbook

Re: How to work on File Content collected from Azure blob in Playbook

Re: Powershell Modules in Xsoar Cloud

Unlock your full community experience!

Cortex XSOAR Discussions

Resolved! Dynamic interactive multi select input inside a playbook

Resolved! Check if XSOAR has connection to an URL

Resolved! python question about importing "msal" module

Resolved! Indicator enrichment detail in layout

Resolved! Get command arguments in Powershell scripts

Resolved! Upload IOC from file to firewall via XSOAR

Resolved! CrowdStrike Falcon detection mirroring