Cortex XSOAR 8 API Changes - 8 - Cortex XSOAR - Cortex - Security Operations

API Key

Standard and Advanced keys: You can create Standard or Advanced Keys (default is Advanced).

Standard keys can be used via CURL, and still require the key in the authorization header, but also require an additional header (x-xdr-auth-id) with the value of the key ID, if using a Standard key.

Advanced keys require a nonce to prevent replay attacks which is sent in headers.

API Structure

The API is now like Cortex XDR, where the API is not the server URL, but rather: api-{tenant}/public_api/v1/{name of api}/{name of call}.

Example of an old API Call with server URL: curl 'https://hostname:443/incidents/search'

Example of a new API Call with API URL: curl -X POST https://api-{fqdn}/xsoar/{name of api}/{name of call}/