Hi All, I am new to xSOAR and wanted to know if there is a way to export the list of playbooks enabled in my environment This is to check what playbooks we are using Vs what is available in marketplace Thank you aparna
Dears, Kindly need to add a list of IPs and Domains to exclusion list from json format. Kindly advise how to do that and what is the needed format?
Hello, In many indicators' layout there is a comment section where users can add text comment. Is there a way to automatically add comment from a playbook? Looking at setIndicator, I didn't find the right field associated to the comment section. Thank you for reading; Regards, Alexandre
How to convert a list into int in xsoar automation.
How to convert a list into int in xsoar automation.
Hi Team, I have developed automation to get all the similar incident names with dictionary return results that have ID and incident name. Once I call the script from the widget, pie, table, or any of them, I get the following error; anyone can help !!
Hi Team, I hope all are doing well; how can I extract the domains from the phishing attached files? I extracted the email using " ParseEmailFilesV2 "; exported all the email parameters such as HTML and others successfully; however, once I tried to convert HTML XML output to JSON using "ConvertXmlToJson" automation, it did not work as expecte...
What integration can be used to integrate Palo Alto on Prem EDL with xsoar to update the list
Hey all! I'm running a report daily which shows incidents that are still active. The idea is that we'll catch incidents that might have fallen through the cracks somehow. It works well for the most part, but it shows incidents that analysts are still working on in that moment. Is there a way to only show results beyond 15 or 30 minutes? ...
Hi, What are the engine processes corresponding to engine shell installation on RHEL with Podman? Are the number of processes on the engine server expected to rise due to each integration made on it? What are the considerations for keeping the engine processes low i.e under 500 in a multi engine server? Thanks.
Hi, I came across this documentation regarding XSOAR https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-9/cortex-xsoar-threat-intel-management-guide/unit42-intel/unit42-sessions-and-submissions The Sessions & Submissions tab enables you to use your sessions and submissions data for investigation and analysis. Sessions and submission...
Hello, I'd tried to find a task inside XSOAR, however nothing was found. Some clue how to do it?
Dears, I made a custom Integration that get the verdict of (URLs) like (Malicious - Benign). Now I have a question How to add the name and result of this integration like the prebuilt Integrations which are in the screenshots (virus total - urlscan - etc..).. kindly find the screenshot for claridication
Hello, A playbook is creating an email with data to deliver in html, however we can't find the way to introduce the logo of the company inside it. What path should we add to the tag "<img src="*****"> to obtain the logo in our local folders?
It is of my understanding that you can set server configurations on the XSOAR Server and on a single engine to provide the links and responses through the engine that acts as a proxy. In a single server deployment with multiple engines can you manage this dynamically ? Essentially, can you have two engines with this configuration (Bind Address a...
