Cortex XSOAR 8 API Changes - 8 - Cortex XSOAR - Cortex

The following table describes some of the API changes for Cortex XSOAR 8.

Feature	Comments
API Key	Standard and Advanced keys: You can create Standard or Advanced Keys (default is Advanced). Standard keys can be used via CURL, and still require the key in the authorization header, but also require an additional header (`x-xdr-auth-id`) with the value of the key ID, if using a Standard key. Advanced keys require a nonce to prevent replay attacks which is sent in headers.
API Structure	The API is now like Cortex XDR, where the API is not the server URL, but rather: `api-{tenant}/public_api/v1/{name of api}/{name of call}`. Example of an old API Call with server URL: `curl 'https://hostname:443/incidents/search'` Example of a new API Call with API URL: `curl -X POST https://api-{fqdn}/xsoar/{name of api}/{name of call}/`

Feature

Comments

API Key

Standard and Advanced keys: You can create Standard or Advanced Keys (default is Advanced).

Standard keys can be used via CURL, and still require the key in the authorization header, but also require an additional header (x-xdr-auth-id) with the value of the key ID, if using a Standard key.

Advanced keys require a nonce to prevent replay attacks which is sent in headers.

API Structure

The API is now like Cortex XDR, where the API is not the server URL, but rather: api-{tenant}/public_api/v1/{name of api}/{name of call}.

Example of an old API Call with server URL: curl 'https://hostname:443/incidents/search'

Example of a new API Call with API URL: curl -X POST https://api-{fqdn}/xsoar/{name of api}/{name of call}/

Cortex XSOAR 8 API Changes - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR 8 Feature Changes