About abracamontesauz

abracamontesauz · ‎06-20-2022

Hello, We are working in an integration between XSOAR and XDR. We want to upload IOCs from a given file to XDR, we have seen that Cortex XDR - IOC integration allows a synchronization of IOCs but what we want is a manual push of new IOCs to XDR, not to sync them. We don't understand the given commands of the integration and need to understand how to instance the integration to avoid uploading other IOCs that the ones needed. Thanks in advance, Alejandro Bracamonte.

abracamontesauz · ‎09-01-2021

Hi Doug! Thank you for your response. Our problem here is not to get the EntryID from the context. We are downloading a file using requests library in a automation and we want to store that file in the incident adding the information to the context. We don't know how to do this in the same automation. Regards, Alejandro.

abracamontesauz · ‎09-01-2021

Hello Roger, The problem here is the same, we want to get the EntryID of the file so we can execute other tasks in XSOAR to analyze the file. How do you access the file from an incident when it is stored in the FTP server? Reagrds, Alejandro Bracamonte.

abracamontesauz · ‎08-31-2021

Hello! We want to create an automation which download a file from a given URL (which contains a file. pe: https://www.comunidad.madrid/sites/default/files/doc/sanidad/epid/informe_epidemiologico_semanal_covid_s32.pdf) The idea is to store the file in the XSOAR incident to analyze it with our tools. It is easy to do with Python in a local machine, but as XSOAR dockerize and works with files in a different way we don't know how to proceed. Does anyone know the best way to download files and store them in the same incident? Thanks in advance, Alejandro Bracamonte.

abracamontesauz · ‎02-23-2021

Good morning Adam, In my integration I had already used the function getFilePath. I have something like: file=demisto.getFilePath(file_id) file=open(file['path'],'rb') Then, I use this variable as the input for the API request because if I try to open file['name'] it can't find the file. The problem is that this variable is equals to <_io.BufferedReader name='71_356@71'> and it should be <_io.BufferedReader name='myfile.xls'> to allow the API to read the extension properly. Thanks once again, Alejandro.

abracamontesauz · ‎02-22-2021

That's exactly the point, sorry for my explanations.

abracamontesauz · ‎02-22-2021

Hi, No, I am using an external API that I have implemented. Regards.

abracamontesauz · ‎02-22-2021

Hello @ABurt, Thank you for your response, that information will be very useful for me in the future. Although, my problem is not to check the file extension at Demisto's level. The problem is that the external API which I am using, receives the file like "<_io.BufferedReader name='71_313@71'>" using python open() method, and checks that name to read the extension. I need that name to be something like "myfile.xls" so the API could read it properly and recognize the file to store it. I hope it's is clearer now. Thank's in advance, Alejandro.

abracamontesauz · ‎02-22-2021

Hi! Thank you for your reply. I have been testing with the information you have provided but I have not been able to upload the file. I am working with the API's owner to solve the problem by his side reading the extension from the file's metadata, but it would be very useful to have a way to access a file using the actual name or path. Thank you for your help! Alejandro.

abracamontesauz · ‎02-18-2021

Hello everyone, I am having some trouble working with files in an incident. I have integrated an API that need a path to upload a file. This API checks the file extension in the path and as I have seen, file paths in XSOAR incidents are something like 80_916@80. I would need to have access to an absolute path or a way to get a path with the file name at the end of it. Maybe exists a way to move a file to a specific path or something that could help me with this issue. I haven't found any documentation about this. Could you help me? Thanks in advance, Alejandro.

Member Since	‎02-18-2021 01:31 AM
Date Last Visited	‎06-21-2022 04:09 AM
Posts	10

Online Status	Offline
Date Last Visited	‎06-21-2022 04:09 AM

About abracamontesauz

Playbook to upload IOCs to Cortex XDR

Re: [XSOAR] Issue downloading files

Re: [XSOAR] Issue downloading files

[XSOAR] Issue downloading files

Re: Issue Working with Files

Re: Issue Working with Files

Re: Issue Working with Files

Re: Issue Working with Files

Re: Issue Working with Files

Issue Working with Files

Re: Issue Working with Files

Playbook to upload IOCs to Cortex XDR

Re: [XSOAR] Issue downloading files

Re: [XSOAR] Issue downloading files

[XSOAR] Issue downloading files

Re: Issue Working with Files

Re: Issue Working with Files

Re: Issue Working with Files

Re: Issue Working with Files

Re: Issue Working with Files

Issue Working with Files

Unlock your full community experience!

About abracamontesauz