Cisco ISE
Use the Cisco ISE integration to get endpoint data, and to manage and update endpoints and ANC policies.
Palo Alto Networks Cortex XDR - Investigation and Response
Use the Palo Alto Networks Cortex XDR integration to get a list of incidents and detailed incident data, and to update incident fields.
Proofpoint TAP v2
Use the Proofpoint Targeted Attack Protection (TAP) integration to protect against and provide additional visibility into phishing and other malicious email attacks.
URLhaus
Use the URLhaus integration to get information about URLs and domains, and to download malware samples.
Atlassian Confluence Server
Use the Atlassian Confluence Server API integration to manage your Confluence spaces and content.
VulnDB
Use the VulnDB integration to get information about vulnerabilities for various products, including operating systems, applications, and so on.
XDRSyncScript
This script compares between Demisto incidents and incidents in Palo Alto Networks Cortex XDR, and updates both incidents mutually. This script always uses the xdr-get-incident-extra-data command, and outputs to the entire incident JSON to context. If the incident was updated in Cortex XDR, the Demisto incident will be updated accordingly, and the playbook will rerun. If the incident is updated in Demisto, then the script will execute the xdr-update-incident command and update the incident in Cortex XDR.
