This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About MBeauchamp2
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About MBeauchamp2
02-03-2023
25Posts
9Likes
9Solutions
Feb 03, 2023Last Visited
User
Activity
User
Profile
Latest posts by MBeauchamp2
| Subject | Views | Posted |
|---|---|---|
| 64 | 02-01-2023 07:06 AM | |
| 157 | 01-20-2023 07:02 AM | |
| 204 | 01-13-2023 10:58 AM | |
| 248 | 12-08-2022 07:36 AM | |
| 291 | 12-01-2022 12:53 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 02-01-2023 07:06 AM | |
| 1 Like | 11-28-2022 08:04 AM | |
| 1 Like | 12-08-2022 07:36 AM | |
| 1 Like | 11-28-2022 08:29 AM | |
| 1 Like | 12-01-2022 12:53 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 6 Likes | |||
| 7 Likes | |||
| 3 Likes | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 10-22-2020 10:36 AM |
| Date Last Visited | 02-03-2023 09:55 AM |
| Posts | 25 |
| Total Likes Received | 9 |
02-01-2023
07:06 AM
1 Kudo
Sounds like you need a preprocessing rule or more likely a script. Checkout the training video on Preprocessing:
https://live.paloaltonetworks.com/t5/cortex-xsoar-how-to-videos/cortex-xsoar-how-to-customer-success-engineering-training-video/ta-p/484604
Alternatively you could use the Dedup - Generic v4 playbook as one of the first steps in the playbook, and have it search for an existing Incident and link & close the new one to that.
... View more
01-20-2023
07:02 AM
Add the parameter &downloadName=6_6_latest to your download link.
... View more
01-13-2023
10:58 AM
Use rawName instead of Name.
!SearchIncidentsV2 query=`rawName:"This is a test"`
... View more
12-08-2022
07:36 AM
1 Kudo
It's the name of the group being sent in the SAML token that you want to map to that Role.
So say you have a group on your Identity Provider called "Cortex Admins", you would put "Cortex Admins" in the Role mapping for your Administrator Role.
There is a video on setting up SAML with XSOAR that walks through this - https://live.paloaltonetworks.com/t5/cortex-xsoar-how-to-videos/cortex-xsoar-video-how-to-setup-saml-authentication/ta-p/387444
... View more
12-01-2022
12:53 PM
1 Kudo
Correct, you'll need the Threat Intel Management license to pull full feeds - https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-9/cortex-xsoar-admin/cortex-xsoar-overview/cortex-xsoar-licenses
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-03-2023
09:55 AM
|
Latest Tags
No tags yet
Likes Given To
Likes From
| User | Likes Count |
|---|---|
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks