Install and Configure Content Packs - Tutorials - 6.x - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR 6.x Tutorials

Product
Cortex XSOAR
Version
6.x
Creation date
2022-10-13
Last date published
2023-06-05
Category
Tutorials

To begin, we need to install and configure the relevant content packs.

Content Pack

Content

Description

Phishing

Automations, Playbooks, Incident Fields, Incident Layouts, Incident Types, Playbooks

Phishing content pack

Microsoft Exchange Online

EWS O365

Mail listener/sender

VirusTotal

VirusTotal - (API v3)

Data enrichment and threat intelligence

WildFire by Palo Alto Networks

Palo Alto Networks WildFire V2

Forensic and Malware analysis

Phishing Campaign

Automations, Incident Fields, Incident Type, Layout, Playbook

Detect whether a phishing incident is part of a phishing campaign

Phishing URL

DBotPredictURLPhishing and DBotUpdateLogoURLPhishing automations

Predict phishing URLs using a pre-trained model. Add, remove, or modify logos from the URL Phishing model.

We will also use the Rasterize and Active Directory integrations, which are pre-installed.