The Aggregated Scripts pack contains scripts that execute multiple commands, significantly streamlining playbook creation and execution.
What does this pack do?
- File indicator enrichment using an array file hashes.
Aggregated Scripts
- Details
- Content
- Dependencies
- Version History
A pack containing all aggregated scripts.
The Aggregated Scripts pack contains scripts that execute multiple commands, significantly streamlining playbook creation and execution.
What does this pack do?
- File indicator enrichment using an array file hashes.
Automations
| Name | Description |
|---|---|
| block-external-ip | The script blocks a list of IP addresses in supported integrations. |
| get-user-data | This script gathers user data from multiple integrations and returns an Account entity with consolidated information to the context. |
| file-enrichment | This script gathers file reputation data from multiple integrations and returns a "FileEnrichment" object with consolidated information to the context output. |
| get-endpoint-data | This script gathers endpoint data from multiple integrations and returns an endpoint entity with consolidated information to the context. |
| clear-user-session | This script clears user sessions across multiple integrations for a list of usernames. |
Automations
| Name | Description |
|---|---|
| get-user-data | This script gathers user data from multiple integrations and returns an Account entity with consolidated information to the context. |
| get-endpoint-data | This script gathers endpoint data from multiple integrations and returns an endpoint entity with consolidated information to the context. |
| block-external-ip | The script blocks a list of IP addresses in supported integrations. |
| file-enrichment | This script gathers file reputation data from multiple integrations and returns a "FileEnrichment" object with consolidated information to the context output. |
| clear-user-session | This script clears user sessions across multiple integrations for a list of usernames. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| WildFire by Palo Alto Networks | By: Cortex XSOAR |
All level dependencies (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
1.0.9 - 4261213 (July 22, 2025)
- 40691
Download
Scripts
get-endpoint-data
- Updated the inputs from agent_id, agent_ip and agent_hostname to endpoint_id, endpoint_ip and endpoint_hostname.
- Updated the output structure.
- Updated the brand support:
- Removed support for 'Cylance Protect v2', 'VMware Carbon Black EDR v2' and 'ExtraHop v2'.
- Added support for 'FireEyeHX v2'.
- Updated the brands argument to support free-text input for multiple brands instead of limiting it to predefined values.
- 40691
Download
1.0.1 - 4023265 (July 1, 2025)
1.0.0 - 3980324 (June 18, 2025)
A pack containing all aggregated scripts.
1.0.9 - 4261213 (July 22, 2025)
- 40691
Download
Scripts
get-endpoint-data
- Updated the inputs from agent_id, agent_ip and agent_hostname to endpoint_id, endpoint_ip and endpoint_hostname.
- Updated the output structure.
- Updated the brand support:
- Removed support for 'Cylance Protect v2', 'VMware Carbon Black EDR v2' and 'ExtraHop v2'.
- Added support for 'FireEyeHX v2'.
- Updated the brands argument to support free-text input for multiple brands instead of limiting it to predefined values.
- 40691
Download
1.0.1 - 4023265 (July 1, 2025)
1.0.0 - 3980324 (June 18, 2025)
A pack containing all aggregated scripts.
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | June 18, 2025 | |
| Last Release | July 22, 2025 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
