About SilviuMihailDascalu

You need to get in touch with your IT team to resolve this problem as you need the uninstall password.       ... View more

Hey Frances,   How's your network in general meaning Do you have plenty of bandwidth? Also there is any broker VM involved in your setup? On the other hand the issue you were mentioning it's between 7.0 and 7.3 which are end of life at the moment ... Is this happening as well between 7.5 and 7.7?   Thanks, Silviu ... View more

Hi,   Please follow the below article(s) to uninstall Cortex XDR Agent depending on the OS type.   - Windows  - Linux - Mac   Let me know if you have any questions or concerns!   Thanks, Silviu ... View more

Hi,   Thanks for posting to our Live Community Discussion Board. Would you be able to share the SSO Administrator role configuration in order to review?   Thanks, Silviu ... View more

Hi,   At the moment we don't have an import function / library to be imported in your scripts but as @sramesh-7 mentioned in the Marketplace we have several integrations which allows you to generate random incidents. In case you're looking for Phishing samples my recommendation is to leverage the Onboarding integration available in the Marketplace. You could clone and make changes on these integrations in order to be adapted to your needs.   Let us know if you got any question or concerns.   Thanks, Silviu ... View more

In the first layout tab you're displaying you could add some top sections displaying the fields you would like to display to your analyst. ... View more

Hi,   Thanks or posting in our Live Community Discussions. At the moment we don't support changing the column view in Cortex XSOAR as this is user specific only. Have you tried looking into the Summary View? I'm thinking you could "enforce" by creating some top sections with the data that you want to display to the analyst.   Let me know if you have any questions or concerns!   Thanks, Silviu ... View more

Hi Sucuncuoglu,   Thanks for posting in our Live Community Discussion board. Assuming you're referring to the QRadar v3 integration. I've made a quick review and in the get_incidents_long_running_execution function I can see we're adding the range properly to the API call: See line 1561 and 1562 : range_max = offenses_per_fetch - 1 if offenses_per_fetch else MAXIMUM_OFFENSES_PER_FETCH - 1 range_ = f'items=0-{range_max}' So I suppose it might be something else that cause this delay. In order to detect what might be gong wrong, would you mind opening a Customer Support Ticket in order to identify what might be the issue?   Thanks, Silviu Thanks, Silviu ... View more

Hi Securado,   Thanks for posting in our Live Community Discussions. In order to get assistance with your issue kindly ask to open a support ticket with our Customer Support team in order to review and fix your issue.    Thanks, Silviu ... View more

Hi Michael, Thanks for posting into our Live Community Discussions!    Unfortunately there is no way you can set images via setIncident command as this is used entirely for altering values on the system and custom fields! Since you have multiple images generated via the Rasterize integration these entries are available for your to consume in the warRoom! My recommendation will be to start tagging those entries and leverage layout sections with warRoom filters to display these images in the "WarRoom entries" section similar to the Phishing layout where we display the screenshots of the URL. The size of the image cannot be configured but the end user can click on the image an enlarge if need it.    Let me know if this make sense! ... View more

Hi,   Thanks for posting in our Live Community. Not sure if I fully understand your issue but with regards to your first statement you will need to configure the date range as most probably the report is configured to display data in a certain date range. This date range can be applied to all the widgets or some widgets if you prefer that only some of the widgets inside the reports will show data for a different date range. For more informations about custom reports please find the documentation available at https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-5/cortex-xsoar-admin/reports/create-a-report.html#idea3e0333-7836-4541-93d2-e355639c5412   Let us know if you have any questions or concerns! ... View more