electronicspolew.blogg.se

Note: When Configuring a role for the API Key's permission you can create a custom role or use a builtin. Click the +New Key button in the top right corner.In your Cortex XDR platform, go to Settings.You need to collect several pieces of information in order to configure the integration on Cortex XSOAR. Note: An incident whose status was changed to a filtered status after its creation time will not be fetched.Ĭlick Test to validate the URLs, token, and connection. If no status is provided then incidents of all the statuses will be fetched. The statuses of the incidents that will be fetched. Whether the XDR tenant Mode is prevent only In addition, for this change to be reflected, the owners must exist in both Cortex XSOAR and Cortex XDR. However, if you now change the owner back in Cortex XDR, this additional change will not be reflected in Cortex XSOAR.

For example, if you change the owner in Cortex XSOAR, the new owner will also be changed in Cortex XDR. Note that once this value is changed and synchronized between the systems, additional changes will not be reflected. If selected, for every incident fetched from Cortex XDR to Cortex XSOAR, the incident owners will be synced. Fetches only starred incidents within the specified time range.įirst fetch timestamp (, e.g., 12 hours, 7 days)įor Cortex XSOAR version 6.0.0 and above.

, e.g., 12 hours, 7 days).

The maximum number of incidents per fetch. The timeout of the HTTP requests sent to Cortex XDR API (in seconds). Server URL (copy URL from XDR - click ? to see more info.) Search for Palo Alto Networks Cortex XDR - Investigation and Response.Ĭlick Add instance to create and configure a new integration instance. Navigate to Settings > Integrations > Servers & Services. This integration was integrated and tested with version 2.6.5 of Cortex XDR - IR Configure Palo Alto Networks Cortex XDR - Investigation and Response on Cortex XSOAR # #Ĭortex XDR is the world's first detection and response app that natively integrates network, endpoint, and cloud data to stop sophisticated attacks. This Integration is part of the Cortex XDR by Palo Alto Networks Pack.