cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who rated this post

L5 Sessionator

Hi @Josep, single list data is not accessible outside XSOAR. You can use the EDL option.

 

Convert that list of URLs into IOCs and add a tag to them. Ex. PublishList

 

Then create a new instance of the Generic Export Indicators Service. Choose the format and the query. Ex. "tags:PublishList and type:URL".

Screenshot 2023-08-25 at 12.27.17 am.png

You can access the data with URL like - https://<cortex-xsoar-address>/instance/execute/<instance_name>/ (You might need to set the execute.external server config to true).

Who rated this post