Agents Overview - Administrator Guide - EoL - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide
Product
Cortex XSOAR
Version
6.5
Creation date
2022-09-28
Last date published
2024-07-16
Category
Administrator Guide
End of Life > EoL
Abstract

Create a D2 agent for incident or a shared agent to transfer files, execute commands on remote machines by installing the D2 Content Pack and using automation scripts and Powershell commands.

Note

As of February 27th, 2022, D2 Agents for new customers are no longer supported. D2 Agents in use by existing customers will remain supported until September 1st, 2022.

Agents enable you to transfer files and execute commands on remote machines.

You can create a D2 agent for a specific incident or you can create a shared agent for a number of incidents.

You need to install the D2 Content Pack, which enables you use commands and automations for D2 and Shared Agents. You can use the automation scripts that come out-of-the box or configure and create scripts in Agent Tools.

Note

Most D2 automations and commands are relevant for both D2 Agents and Shared Agents.

After installation, you can run Powershell commands directly from Cortex XSOAR on common applications, such as Office 365 and Active Directory. You need to Configure Cortex XSOAR to Use PowerShell, before running PowerShell commands.