Cylance Protect | Marketplace

Details
Content
Dependencies
Version History

Manage Endpoints using Cylance protect

CylancePROTECT is an integrated threat prevention solution that combines the
power of artificial intelligence (AI) to block malware infections.

Integrations

Name	Description
Cylance Protect v2	Manage Endpoints using Cylance protect.

Playbooks

Name	Description
Get File Sample By Hash - Cylance Protect	Deprecated. Use "Get File Sample By Hash - Cylance Protect v2" playbook instead.
Endpoint Enrichment - Cylance Protect v2	Enriches endpoints using the Cylance Protect v2 integration.
Get File Sample By Hash - Cylance Protect v2	This playbook returns a file sample to the War Room given the file's SHA256 hash, using Cylance Protect v2 integration.
Block File - Cylance Protect v2	This playbook accepts a SHA256 hash and adds the hash to the Global Quarantine list using the Cylance Protect v2 integration.

Integrations

Name	Description
Cylance Protect v2	Manage Endpoints using Cylance protect.

Playbooks

Name	Description
Endpoint Enrichment - Cylance Protect v2	Enriches endpoints using the Cylance Protect v2 integration.
Block File - Cylance Protect v2	This playbook accepts a SHA256 hash and adds the hash to the Global Quarantine list using the Cylance Protect v2 integration.
Get File Sample By Hash - Cylance Protect v2	This playbook returns a file sample to the War Room given the file's SHA256 hash, using Cylance Protect v2 integration.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (4)

Pack Name	Pack By
Base	By: Cortex XSOAR
Aggregated Scripts	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR

1.1.43 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.1.42 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

1.1.41 - R5469292 (October 20, 2025)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.3562326.

Related pull requests:
- 40309

Download

1.1.40 - R3398781 (May 13, 2025)

Integrations

Cylance Protect v2

Metadata and documentation improvements.

Related pull requests:
- 39023

Download

1.1.39 - R1973041 (January 13, 2025)

Integrations

Cylance Protect v2

Code functionality improvements.
Updated the Docker image to: demisto/auth-utils:1.0.0.1839651.

Related pull requests:
- 38048

Download

1.1.38 - 1666862 (November 18, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.116752.

Related pull requests:
- 37228
- 37223

Download

1.1.37 - 1615839 (November 10, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.115527.

Related pull requests:
- 37120
- 37113

Download

1.1.36 - R1408452 (September 19, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.101747.

Related pull requests:
- 35299
- 35317
- 35192
- 35111
- 35316
- 35060
- 35276
- 35083
- 35314
- 35328
- 35114
- 35332
- 35315
- 35292
- 35338
- 35259
- 35339
- 35330
- 35343
- 35279
- 35344
- 35324
- 35325
- 35346
- 35333
- 35335
- 35334
- 35336
- 35327
- 34564
- 35265
- 35352
- 35320
- 35311
- 35050
- 35350
- 35326
- 32121
- 35135
- 35081
- 35373
- 35371
- 35354
- 34805
- 35376
- 35348
- 35298
- 35367
- 35378
- 35272
- 35345
- 35374
- 35296
- 35267
- 35387
- 35106
- 35369
- 34900
- 35178
- 35115
- 35408
- 35366
- 35291
- 35318
- 35419
- 35381
- 35407
- 35297
- 35368
- 35380
- 35413
- 35415
- 35423
- 35418
- 35351
- 35165
- 35422
- 35428
- 35425
- 35202
- 35433
- 35322
- 35113
- 35430
- 35432
- 35229
- 35411
- 35357
- 35412
- 35406
- 35191
- 35424
- 35431
- 35442
- 35414
- 35388
- 35091
- 35275

Download

1.1.35 - 925751 (April 1, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.91447.

Related pull requests:
- 33683

Download

1.1.34 - 865088 (March 3, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.88531.

Related pull requests:
- 33194

Download

1.1.33 - 823153 (February 12, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.87472.

Related pull requests:
- 32847

Download

1.1.32 - 798475 (February 1, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.86556.

Related pull requests:
- 32527

Download

1.1.31 - 760302 (January 14, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.84760.

Related pull requests:
- 32160

Download

1.1.30 - 722180 (December 28, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.83934.

Related pull requests:
- 31831

Download

1.1.29 - 7161298 (December 14, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.83550.

Related pull requests:
- 31472

Download

1.1.28 - 7029664 (November 30, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.81563.

Related pull requests:
- 31207

Download

1.1.27 - R6950398 (November 21, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.77807.

Related pull requests:
- 30241

Download

1.1.26 - 6580543 (October 12, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.76157.

Related pull requests:
- 29574

Download

1.1.25 - 6574459 (October 11, 2023)

Playbooks

Block File - Cylance Protect v2

Added the input 'ListType' to allow the analyst to choose the list type to which the threat belongs. Can be "GlobalQuarantine" or "GlobalSafe".

Related pull requests:
- 29524

Download

1.1.24 - 6363299 (September 19, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.74100.

Related pull requests:
- 29735

Download

1.1.23 - 6200580 (August 31, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.72374.

Related pull requests:
- 29343

Download

1.1.22 - 6069807 (August 16, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.69027.
Fixed an issue where the cylance-protect-download-threat command would return a non-descriptive error when a URL is not found.

Related pull requests:
- 28952

Download

1.1.20 - 5925411 (August 1, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.66845.

Related pull requests:
- 28645

Download

1.1.19 - R5866730 (July 25, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.65237.

Related pull requests:
- 28212

Download

1.1.18 - R5692327 (July 5, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.63826.

Related pull requests:
- 27817

Download

1.1.17 - 5540680 (June 15, 2023)

Integrations

Cylance Protect v2

Added the following integration parameters to support credentials fetching object:
- Application ID
- Application Secret
- Tenant API Key
Updated the Docker image to demisto/pyjwt3:1.0.0.62977.

Related pull requests:
- 26557

Download

1.1.16 - 5410099 (May 31, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.61733.

Related pull requests:
- 27077

Download

1.1.15 - 5277943 (May 16, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.58911.

Related pull requests:
- 26536

Download

1.1.14 - R5170573 (May 2, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.56580.

Related pull requests:
- 26185

Download

1.1.13 - 5057113 (April 17, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.55049.

Related pull requests:
- 25887

Download

1.1.12 - 4906551 (March 27, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.51336.

Related pull requests:
- 25536

Download

1.1.11 - 4797511 (March 12, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.49643.

Related pull requests:
- 25199

Download

1.1.10 - R4718798 (March 1, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.48806.

Related pull requests:
- 24841

Download

1.1.9 - R4646022 (February 19, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.47268.

Related pull requests:
- 24464

Download

1.1.8 - R4494864 (January 29, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.45830.

Related pull requests:
- 24044

Download

1.1.7 - R4372591 (January 11, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.43045.

Related pull requests:
- 23641

Download

1.1.6 - 4258430 (December 21, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.40917.

Related pull requests:
- 23179

Download

1.1.5 - R4247670 (December 19, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.39861.

Related pull requests:
- 22671

Download

1.1.4 - R4150463 (December 4, 2022)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 22175

Download

1.1.3 - 4005065 (November 9, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.36533.

Related pull requests:
- 22007

Download

1.1.2 - 3818129 (October 11, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.34355.

Related pull requests:
- 21535

Download

1.1.1 - 3652468 (September 13, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.29644.

Related pull requests:
- 21128

Download

1.1.0 - 2988482 (May 26, 2022)

Integrations

Cylance Protect v2

New Commands Added support for Optics API with 3 new commands:
- cylance-optics-create-instaquery.
- cylance-optics-get-instaquery-result.
- cylance-optics-list-instaquery.
Added the full context and raw_response result for cylance-protect-get-policy-details.

Download

1.0.9 - 2371508 (February 7, 2022)

Integrations

Cylance Protect v2

Fixed an issue where multiple indicators returned DBotScore objects simultaneously.

Download

1.1.43 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.1.42 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

1.1.41 - R5469292 (October 20, 2025)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.3562326.

Related pull requests:
- 40309

Download

1.1.40 - R3398781 (May 13, 2025)

Integrations

Cylance Protect v2

Metadata and documentation improvements.

Related pull requests:
- 39023

Download

1.1.39 - R1973041 (January 13, 2025)

Integrations

Cylance Protect v2

Code functionality improvements.
Updated the Docker image to: demisto/auth-utils:1.0.0.1839651.

Related pull requests:
- 38048

Download

1.1.38 - 1666862 (November 18, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.116752.

Related pull requests:
- 37228
- 37223

Download

1.1.37 - 1615839 (November 10, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.115527.

Related pull requests:
- 37120
- 37113

Download

1.1.36 - R1408452 (September 19, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.101747.

1.1.35 - 925751 (April 1, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.91447.

Related pull requests:
- 33683

Download

1.1.34 - 865088 (March 3, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.88531.

Related pull requests:
- 33194

Download

1.1.33 - 821588 (February 12, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.87472.

Related pull requests:
- 32847

Download

1.1.32 - 795978 (January 31, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.86556.

Related pull requests:
- 32527

Download

1.1.31 - 760302 (January 14, 2024)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.84760.

Related pull requests:
- 32160

Download

1.1.30 - 722180 (December 28, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.83934.

Related pull requests:
- 31831

Download

1.1.29 - 7161298 (December 14, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.83550.

Related pull requests:
- 31472

Download

1.1.28 - 7029664 (November 30, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.81563.

Related pull requests:
- 31207

Download

1.1.27 - R6950398 (November 21, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.77807.

Related pull requests:
- 30241

Download

1.1.26 - 6580543 (October 12, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/auth-utils:1.0.0.76157.

Related pull requests:
- 29574

Download

1.1.25 - 6574459 (October 11, 2023)

Playbooks

Block File - Cylance Protect v2

Added the input 'ListType' to allow the analyst to choose the list type to which the threat belongs. Can be "GlobalQuarantine" or "GlobalSafe".

Related pull requests:
- 29524

Download

1.1.24 - 6363299 (September 19, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.74100.

Related pull requests:
- 29735

Download

1.1.23 - 6200580 (August 31, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.72374.

Related pull requests:
- 29343

Download

1.1.22 - 6076227 (August 17, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.69027.
Fixed an issue where the cylance-protect-download-threat command would return a non-descriptive error when a URL is not found.

Related pull requests:
- 28952

Download

1.1.20 - 5940472 (August 2, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.66845.

Related pull requests:
- 28645

Download

1.1.19 - R5866730 (July 25, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.65237.

Related pull requests:
- 28212

Download

1.1.18 - 5656218 (June 30, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.63826.

Related pull requests:
- 27817

Download

1.1.17 - 5546375 (June 16, 2023)

Integrations

Cylance Protect v2

Added the following integration parameters to support credentials fetching object:
- Application ID
- Application Secret
- Tenant API Key
Updated the Docker image to demisto/pyjwt3:1.0.0.62977.

Related pull requests:
- 26557

Download

1.1.16 - 5410099 (May 31, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.61733.

Related pull requests:
- 27077

Download

1.1.15 - 5277943 (May 16, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.58911.

Related pull requests:
- 26536

Download

1.1.14 - R5170573 (May 2, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.56580.

Related pull requests:
- 26185

Download

1.1.13 - 5057113 (April 17, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.55049.

Related pull requests:
- 25887

Download

1.1.12 - 4906551 (March 27, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.51336.

Related pull requests:
- 25536

Download

1.1.11 - R4797511 (March 12, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.49643.

Related pull requests:
- 25199

Download

1.1.10 - R4718798 (March 1, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.48806.

Related pull requests:
- 24841

Download

1.1.9 - R4646022 (February 19, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.47268.

Related pull requests:
- 24464

Download

1.1.8 - 4462378 (January 24, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.45830.

Related pull requests:
- 24044

Download

1.1.7 - R4361094 (January 9, 2023)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.43045.

Related pull requests:
- 23641

Download

1.1.6 - 4258430 (December 21, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.40917.

Related pull requests:
- 23179

Download

1.1.5 - R4246715 (December 19, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.39861.

Related pull requests:
- 22671

Download

1.1.4 - R4150463 (December 4, 2022)

Integrations

Cylance Protect v2

Added sections to instance configuration.

Related pull requests:
- 22175

Download

1.1.3 - 4005065 (November 9, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.36533.

Related pull requests:
- 22007

Download

1.1.2 - 3818865 (October 11, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.34355.

Related pull requests:
- 21535

Download

1.1.1 - 3652468 (September 13, 2022)

Integrations

Cylance Protect v2

Updated the Docker image to: demisto/pyjwt3:1.0.0.29644.

Related pull requests:
- 21128

Download

1.1.0 - 2988482 (May 26, 2022)

Integrations

Cylance Protect v2

New Commands Added support for Optics API with 3 new commands:
- cylance-optics-create-instaquery.
- cylance-optics-get-instaquery-result.
- cylance-optics-list-instaquery.
Added the full context and raw_response result for cylance-protect-get-policy-details.

Download

1.0.9 - 2371508 (February 7, 2022)

Integrations

Cylance Protect v2

Fixed an issue where multiple indicators returned DBotScore objects simultaneously.

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	September 23, 2020
Last Release	March 23, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.