This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Start a conversation

Resolved! Access a list from an integration

To access a list from an automation I use something like: json = json.loads(demisto.executeCommand("getList", {"listName": "blabla"}) However, from an integration I cannot use the executeCommand method. Is there any way to access a list from an integration? If it is not possible, what alternative do I have to access static information (it is a ...

rdevega by • L1 Bithead
  • 5964 Views
  • 6 replies
  • 0 Likes

XSOAR Technical query on HA cluster & license.

Hi Team, The standard customer having some other technical query. Below are the details: When installing cluster from the textual UI, it made me choose the region (default US). How do I change the region AFTER cluster installation completed? How do I know which region does my XSOAR license associate to? Please assist.

Use of Microsoft Graph Security

Hi, Has anyone used the msg-list-security-incident command from the Microsoft Graph Security integration with an odata query. It is specified in the documentation as an optional parameter, but when I try to use it I get an error stating odata is not valid. I am using the Cloud Xsoar.

Use of a Certificate in a Script

Hi, I am wanting to connect to the MicrosoftExchangeOnline (EXO) powershell module in a scrip. I have the module working but to connect to EXO from a script you must use a managed identity with a certificate. It does not support a secret key. I see I can add certificates in Xsoar, but I don't see a way to use them other than in an integration....

How to search for multiple attributes with MISPv3 integration

We have not been able to search for multiples values in the XSOAR MISPv3 integration with the command: !misp-search-attributes I got some tips from the community but it does not seem to work either !misp-search-attributes value=`${list.['8.8.8.8', '4.4.4.4']}` This integration is using pymisp i think, and it should be possible to pass an a...

How to sync status updates in ServiceDesk Plus?

I'm currently using ServiceDesk Plus and I would like to sync the status of requests automatically. Is there a built-in way to configure this behavior, or do I need to use custom scripts?Any advice or documentation would be really helpful. Thanks in advance! #servicedesk #servicedeskplus #xsoarintegration

Remote Repository Errors

I am trying to configure a private remote repository in our Cortex XSOAR 8 development instance. I have tried both on-prem GitHub server using an engine as well as github.com direct from the console but either way gets the same error: "VC: failed to push branch: exit status 128 send-pack: unexpected disconnect while reading sideband packet Con...

J.McGurk by • L0 Member
  • 805 Views
  • 0 replies
  • 0 Likes

Resolved! A Few Quick Questions About the Community Edition

Hello All, Disclaimer: I am a huge XSOAR admin user at work, and was hoping for a community edition that I could run in my lab even if it is slightly limited. Is it OK to just run the Community Edition of XSOAR? Once I start my 3 day trial and it runs out, just how bad of an experience is it? What exactly gets turned off? Regards, Jeff

Copying directories on an SMB share.

I have a playbook where the end result is that I need to MOVE a folder within a Windows share from one location to another and then make a COPY of that folder in another location. The SMB V2 integration doesn't have the functionality to do this, and the PowerShell remoting integration fails when trying to connect with the following error: ac...

Resolving CrowdStrike ODS Scan Detections With Integration

Hello LiveComm, I am trying to change the status and assignment of ODS (On Demand Scans). I have tried to use the !cs-falcon-resolve-detection command but receive a 400 error. Failed to execute 'cs-falcon-resolve-detection' command. Error: Error in API call to CrowdStrike Falcon: code: 400 - reason: Bad Request Failed to validate resource Has an...

  • 1308 Posts
  • 46 Subscriptions
Top Solution Authors
View All
Top Liked Posts
View All
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks