Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

SAML 2.0 -> message signature failed

Hello

 

I do have problems to get Cortex XSOAR talking to our ADFS Server (Windows AD 2012)

Which certificate is here used? It should be, as fas as I understood, somewhere on Cortex XSOAR, but couldn't find anything...

 

 

Spoiler

Response from ADSF Server:

...

XSOAR HTTPS certificate issues

Hi All,

 

I have an issue where I have replaced the self-signed auto generated certificate in XSOAR, the problem is that when I reboot the server the web service doesn't seem to come up, there is no service listening on port 443.

Any help would be great

...

Get "Details" from an Jira Ticket

Hello all

 

How do I get details from an Jira Ticket in Cortex XSOAR?

If I do some "get" and "query" I do get only these output, which I may use in further Tasks:

Spoiler
Ticket
[
{
"Assignee": "aaa",
"Creator": "bbb",
"Id": "1234",
"Key": "ccc-123",
"Status": "
...

XSOAR cant connect to marketplace

Hi
installed a new instance of XSOAR community edition - but cant seem to connect to the marketplace - 
when i try curl to storage.googleapis.com
curl: (56) Recv failure: Connection reset by peer
curl to: https://xsoar.pan.dev works 

the firewall is not d

...

spandor by L0 Member
  • 2788 Views
  • 2 replies
  • 0 Likes

Integration classifier by workflow

Hi,

I have been thinking about this a few times by now. I have a mail listener that fetches incoming mails as incidents. To classify them I would like to send them through a playbook, as a classification key doesn't provide enough context to choose th

...

Docker issues with xSOAR

Hello,

 

A beginner here. It seems that after initial installation when trying to install new integrations and addons from Marketplace, I keep getting warnings about missing Docker images. If I list all the images with /docker_images I see the ones tha

...

antjar by L0 Member
  • 5485 Views
  • 3 replies
  • 0 Likes

Domain checker playbook

Has anyone written a playbook that would check the age of a domain, say via it's Whois creation date, and then do a task?*

*Originally contributed to dfircommunity.slack.com #playbooks channel by SteveC on Friday, May 15th, 2020 at 3:11 pm

 

ELaufer by L2 Linker
  • 8692 Views
  • 3 replies
  • 1 Likes

Resolved! XSOAR blacklisting O365 senders

Hello guys,

 

When analyzing a phishing case, I would like to block a sender for all the company. I've read in the Microsoft doc and they say you can do it by creating a blacklist. I've not been able to find it in XSOAR.

 

Is there a way of doing that?

 

K

...

  • 1096 Posts
  • 34 Subscriptions