Will a Phishing campaign ticket is opened automatically, If yes - when? Note: This question was asked during our Customer Success Webinar: Phishing V3 Cortex XSOAR
Any action(decision-making) ideas by using the URL Phishing & Machine learning Model? Note: This question was asked during our Customer Success Webinar: Phishing V3 Cortex XSOAR
How does the URL prediction reach out to the potentially malicious URL without leaving artifacts that will be traced back to our environment? Note: This question was asked during our Customer Success Webinar: Phishing V3 Cortex XSOAR
Where are the custom logos stored? Note: This question was asked during our Customer Success Webinar: Phishing V3 Cortex XSOAR
It does within an isolated container. We use XSOAR to investigate all kinds of malicious content and it is designed for it - Can we get more information on this? Is it the hardening of Docker ? or others? Note: This question was asked during our Customer Success Webinar: Phishing V3
I am getting an error like this when i add instance while integration cortex x soarError(July 1, 2022 2:50 PM)Script failed to run: "docker images demist o/python3:3.9.8.24399" with error "exec: "docker": executable file not found in $PATH" and output "" (2617) (2603)
How do you recommend enriching/investigating encrypted emails in O365 that are only viewable to the intended recipient? Note: This question was asked during our Customer Success Webinar: Phishing V3
How many emails does the ML model need to be created? Note: This question was asked during our Customer Success Webinar: Phishing V3
Could you please indicate which parts are changed from v2 to v3 as you go through the new playbook? Note: This question was asked during our Customer Success Webinar: Phishing V3
Hello, I am attempting to configure an Ask Task to send one email only with no retries and an end by SLA condition. I have implemented the settings to no retries (default) and to end the task upon SLA Breach 6 hours. Once saving the playbook I see that the SLA Breach setting is returned to original state without being marked. This is a relative...
Hello team, I'm trying to use the extended context feature to keep only the data I'm interrested in and put them where I need them to be. The automation I'm using is infoblox-get-ip from Infoblox integration. Here is the output of the automation: I'm setting the following string in the Extended Context field (splitted on multiple lines for bette...
Hi, I was making 2 playbooks.In the first playbook, after creating the same I scheduled it as a job. Each time the job runs, it creates a incident case. How do I prevent the incident case from being created when the job runs? In the second playbook, I was creating playbook which pulls MISP feeds which I want to send to another solution. Since it...
Hi,I am trying to create a playbook that1) Searches for expired accounts in AD2) Retrieves the sAMAccountName, Display name and expired date3) Delete the accounts 4) Sent an email notification with the details of the accounts deleted. I created the ldap query for the same and one factor was to get the current time to use in the query.There is a ...
Hi, I configured TAXII Server v1 on Cortex XSOAR. I am trying to get understand the idea of collections. I wish to create a multiple collections within XSOAR so that when a taxii client polls for the list of collections, it can see the list and select on the indicators required. How do I make the indicators/threat report that are added to XSOAR ...
We are experiencing the weird behavior, where the "tanium-tr-alert-update-state" command update all alert status.The full command used is as below!tanium-tr-alert-update-state alert_ids=2267 state=resolvedI have updated the Tanium Threat Response V2 to latest verison 2.0.15Please help to look into it and let us know what is the solution.Thank you.
