Powershell Modules in Xsoar Cloud

[RonShuck22]

Hi,

I am trying to integrate with our Microsoft Defender instance from Xsoar Cloud. Right now I am trying to create a playbook task to add an item to the Tenant Allow Block List (TABL). Looks like the only way is via Powershell. I have a script that will work, but the default engine doesn't have the module needed, ExchangeOnlineManagement. Is this even possible to add a module? If so, any help or guidance would be great. Copilot wqas not help it gave steps for menu options that don't exist.

[JStephan · Accepted solution]

Hey there,

is this v6 or v8 of XSOAR?

If it is v6 it is rather easy, as you can build your own image via the gui

If it is v8 we dont have the option, so you would need to check here

https://github.com/demisto/dockerfiles-info

if by any chance we have the image you are looking for, or go through the trouble and build one your self

https://github.com/demisto/dockerfiles/blob/master/README.md

[RonShuck22]

Thanks for the reply. I believe demisto/pwsh-exchangev3 is working. I got past the error about unrecognized command. We are setting up a Microsoft Application ID to test and see if it works, but I expect it will.